Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A software development company uses Microsoft Entra ID and wants to ensure that all newly created users have strong, unique passwords that are not easily guessed or part of known compromised password lists. They also want to prevent users from reusing old passwords. Which Microsoft Entra capability helps enforce these password policies?
- AMicrosoft Entra Password Protection
- BMicrosoft Entra multifactor authentication (MFA)
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Password Protection
Microsoft Entra Password Protection is designed to detect and block weak, commonly used, or compromised passwords, both for users creating new passwords and for administrators setting temporary passwords. It also prevents password reuse, directly addressing the company's requirements.
Why the other options are wrong
- B. MFA adds a second verification step, but doesn't ensure the strength or uniqueness of the password itself.
- C. Conditional Access enforces policies based on conditions, not directly on password strength or compromise status.
- D. Identity Protection detects broader identity risks (like sign-in from malicious IPs), but Password Protection is specific to password quality.
Microsoft Entra Password Protection
A Microsoft Entra feature that detects and blocks weak, commonly used, or compromised passwords, and prevents users from reusing old passwords, enhancing overall password security.
- Uses global and custom banned password lists.
- Enforces strong password policies during creation and reset.
- Integrates with both Microsoft Entra ID and on-premises Active Directory.
- Helps prevent credential stuffing attacks.
Memory trick: Password Protection: Your digital bouncer for weak passwords.