sc-900 Practice Question 1780
Exam: sc-900
Domain: Describe the capabilities of Microsoft Entra
Topic: Describe Microsoft Entra access management
Difficulty: medium
Contoso Ltd is implementing Conditional Access policies to secure their Microsoft Entra tenant. They want to ensure that only users in the 'Finance' department can access sensitive data from 8 PM to 6 AM. Which policy should they configure, and what additional settings are necessary?
Answer Options
A
Configure a policy with 'User risk level' set to 'Low'
B
Configure a policy with 'Usage location' set to 'Finance' and 'Access time' set to '8 PM - 6 AM'
C
Configure a policy with 'User risk level' set to 'High'
D
Configure a policy with 'IP address' set to 'Finance' and 'Access time' set to '8 PM - 6 AM'
Correct Answer
B: Configure a policy with 'Usage location' set to 'Finance' and 'Access time' set to '8 PM - 6 AM'
Explanation
The correct answer is B. The 'Usage location' setting should be configured to allow only users from the 'Finance' department to access sensitive data during the specified hours. This ensures that only finance users can access the data at night, enhancing security. Option A is incorrect because it does not specify the usage location, which is crucial for departmental access control. Option C is incorrect as it focuses on user risk level, which is not relevant for time-based access restrictions. Option D is incorrect because it mentions IP address filtering, which is not applicable for departmental access control.