SC-100 Practice Question 3903
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: hard
You need to design a solution that automatically revokes active session refresh tokens within minutes if an administrator resets a user password or flags an account as compromised. Which capability must you enable?
Answer Options
A
Continuous Access Evaluation (CAE)
B
Kerberos Ticket Granting Service ticket lifetime GPO
C
NTLMv2 session negotiation
D
DNS dynamic time-to-live caching
Correct Answer
A: Continuous Access Evaluation (CAE)
Explanation
Continuous Access Evaluation (CAE) enables near real-time token revocation and security evaluation between Microsoft Entra ID and supporting resource providers (Exchange, Teams, SharePoint).