Microsoft MS-900 Exam - Topic 6 Question 36 Discussion

Actual exam question for Microsoft's MS-900 exam

Question #: 36
Topic #: 6

A company deploys Microsoft Azure AD. You run the Identity Secure Score report. The report displays five security items. Which three security items on the report have the most impact on the score? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

AEnable policy to block legacy authentication.

BEnable user risk policy.

CRequire multi-factor authentication for all users.

DDelete/block accounts not used in last 30 days.

EDo not expire passwords.

Show Suggested Answer

Suggested Answer: A, B, C

https://docs.microsoft.com/es-es/microsoft-365/security/mtp/microsoft-secure-score?view=o365-worldwide

by Margart at May 07, 2022, 04:22 PM

Limited Time Offer

25%

Off

Get Premium MS-900 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Crista

4 months ago

Blocking legacy auth is a game changer!

upvoted 0 times

...

Judy

4 months ago

A and C are must-haves, but I’m not sold on B.

upvoted 0 times

...

Tabetha

4 months ago

Surprised that not expiring passwords is even an option!

upvoted 0 times

...

Gerald

4 months ago

I think D is also super important though.

upvoted 0 times

...

Derick

4 months ago

Definitely A, C, and B for the score boost!

upvoted 0 times

...

Gail

4 months ago

Deleting inactive accounts seems like a good practice, but I doubt it has as much impact as MFA or blocking legacy auth.

upvoted 0 times

...

Clarence

5 months ago

I feel like enabling user risk policy might be significant too, but I can't recall how it ranks compared to the others.

upvoted 0 times

...

Kenneth

5 months ago

I think requiring multi-factor authentication is definitely a high-impact item. It came up in a practice question I did last week.

upvoted 0 times

...

Mitsue

5 months ago

I remember that blocking legacy authentication is important, but I'm not sure if it's one of the top three.

upvoted 0 times

...

Romana

5 months ago

This question seems straightforward, I think I can handle it.

upvoted 0 times

...

Cecily

5 months ago

I think the key here is that the question is specifically about protecting the SAS configuration directory. That suggests the answer is likely to be something specific to SAS, rather than just general OS controls. I'm leaning towards option C.

upvoted 0 times

...

Mabel

5 months ago

I'm confident Snort decoder is the correct answer here. It's a powerful network intrusion detection system that can analyze and validate network packets.

upvoted 0 times

...