Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A software development company uses Microsoft Entra ID and wants to ensure that all newly created user accounts have strong, unique passwords that meet specific complexity requirements and are not easily guessable. Which Microsoft Entra capability helps enforce these password policies?
- AMicrosoft Entra PIM
- BMicrosoft Entra Identity Protection
- CMicrosoft Entra Password Protection
- DMicrosoft Entra Conditional Access
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Password Protection
Microsoft Entra Password Protection is designed to detect and block weak passwords and custom banned passwords, ensuring that users create strong and secure passwords that comply with organizational policies.
Why the other options are wrong
- A. PIM manages privileged role access, not password policies.
- B. Identity Protection detects risks like compromised credentials but doesn't enforce password creation policies.
- D. Conditional Access enforces policies based on conditions, but doesn't directly manage password complexity or banned lists.
Microsoft Entra Password Protection
A Microsoft Entra ID capability that helps protect your organization by detecting and blocking known weak passwords and custom banned passwords.
- Prevents users from creating commonly used or easily guessed passwords.
- Allows creation of custom banned password lists.
- Supports both cloud-only and hybrid environments.
Memory trick: Password Protection is the stern librarian, making sure no 'password123' books are on the shelf.