Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraEasy
A company is implementing Microsoft Entra ID and wants to ensure that all newly created user accounts adhere to a strong password policy, including custom banned passwords specific to their organization. Which Microsoft Entra capability should they use?
- AMicrosoft Entra Privileged Identity Management (PIM)
- BMicrosoft Entra Password Protection
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: B. Microsoft Entra Password Protection
Microsoft Entra Password Protection allows organizations to define custom banned password lists and enforce strong password policies, preventing users from creating weak or commonly used passwords. This directly addresses the requirement for custom banned passwords and strong policies.
Why the other options are wrong
- A. Microsoft Entra PIM manages, controls, and monitors access to important resources within Microsoft Entra ID, not password policies.
- C. Microsoft Entra Conditional Access manages access to resources based on conditions but does not enforce password creation rules.
- D. Microsoft Entra Identity Protection focuses on detecting and remediating identity-based risks, not enforcing password creation policies.
Microsoft Entra Password Protection
A feature of Microsoft Entra ID that helps protect organizations from password-related attacks by preventing users from creating easily guessable or compromised passwords.
- Prevents use of common weak passwords.
- Allows custom banned password lists.
- Available for both cloud-only and hybrid environments.
Memory trick: Password Protection prevents bad passwords from being born.