sc-900 Practice Question 1783

Exam: sc-900
Domain: Describe the capabilities of Microsoft Entra
Topic: Describe Microsoft Entra access management
Difficulty: medium
Contoso Ltd is experiencing permission bottlenecks in their hybrid environment, where users in the 'IT' department frequently request access to on-premises resources. How should they utilize Conditional Access policies to streamline this process while maintaining security?

Answer Options

A
Remove all access controls for the 'IT' department
B
Grant access to on-premises resources with Conditional Access policies requiring MFA and device compliance
C
Approve all access requests manually for the 'IT' department
D
Increase the permissions for the 'IT' department to cover more resources

Correct Answer

B: Grant access to on-premises resources with Conditional Access policies requiring MFA and device compliance

Explanation

The correct answer is B. The IT department should be granted access to on-premises resources through Conditional Access policies that require multi-factor authentication (MFA) and specific device compliance. This ensures security while streamlining the access process. Option A is incorrect because it suggests removing all access controls, which would increase security risks. Option C is incorrect as it focuses on manual approvals, which may not be efficient. Option D is incorrect because it suggests increasing permissions without MFA, which would not meet security requirements.