SC-100 Practice Question 3931
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: easy
You are designing a privileged access architecture for Microsoft Entra ID. How can you ensure that emergency break-glass accounts are not blocked during an unexpected Conditional Access misconfiguration?
Answer Options
A
Create two dedicated break-glass accounts explicitly excluded from all CA policies
B
Share the Global Administrator password with all employees
C
Disable all Conditional Access policies across the enterprise
D
Use simple, predictable passwords for emergency accounts
Correct Answer
A: Create two dedicated break-glass accounts explicitly excluded from all CA policies
Explanation
Create two dedicated break-glass accounts with complex credentials stored in a physical safe, and explicitly exclude both accounts from all Conditional Access policies.