Exam SC-100 All Questions

View all questions & answers for the SC-100 exam

Exam SC-100 topic 1 question 14 discussion

Actual exam question from Microsoft's SC-100

Question #: 14
Topic #: 1

You have a customer that has a Microsoft 365 subscription and uses the Free edition of Azure Active Directory (Azure AD).
The customer plans to obtain an Azure subscription and provision several Azure resources.
You need to evaluate the customer's security environment.
What will necessitate an upgrade from the Azure AD Free edition to the Premium edition?

A. Azure AD Privileged Identity Management (PIM)
B. role-based authorization
C. resource-based authorization
D. Azure AD Multi-Factor Authentication

Show Suggested Answer

Suggested Answer: A 🗳️

by Jasper666 at Aug. 30, 2022, 8:51 a.m.

Comments

Submit Cancel

d3an

Highly Voted 2 years, 9 months ago

Selected Answer: A

PIM is correct. MFA can be enable on AAD Free using Security Defaults.

upvoted 45 times

xping85

1 year, 10 months ago

I agree. The picture in the answer shows the whole package. If we look at the detailed view, we can see that MFA is already available in Azure Free. https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing

upvoted 4 times

...

jasscomp

1 year, 8 months ago

Correct PIM is a P1/P2 feature and also on EMS E5 (not on EMS E3)

upvoted 1 times

...

Pereiraman

Highly Voted 2 years, 8 months ago

Selected Answer: A

PIM is the correct.

upvoted 25 times

...

svpulver

Most Recent 8 months, 2 weeks ago

The answer should be B. The MFA now is enforced across all Entra ID tenant types, the PIM is an option of Entra ID P2 feature

upvoted 1 times

...

emartiy

11 months, 2 weeks ago

Selected Answer: A

PIM is correct. When security defaults are enabled. MFA section is automatically enabled so it is used in Free edition too. fyi

upvoted 1 times

...

b9e98e8

1 year ago

MFA is activated partially only for all users (all user model or per user model) using security default of Free AAD. However, MFA with conditions that is necessary to evaluate compliance is not achieved by this. We need conditional access policy for such set up. Hence we need AAD P1.

upvoted 1 times

...

bxlin

1 year ago

Selected Answer: D

I would agree with D to ensure full MFA and Conditional Access first, which require Entra ID P1 license. PIM required P2 license.

upvoted 1 times

...

zul_n

1 year, 2 months ago

Selected Answer: A

the answer is PIM https://techcommunity.microsoft.com/t5/microsoft-entra/pim-license-requirement/m-p/3950269

upvoted 3 times

...

kazaki

1 year, 3 months ago

Selected Answer: D

Both A and D are correct

upvoted 1 times

Mnguyen0503

1 year, 1 month ago

Not correct. Entra Free tier gives you Security Defaults, which comes with MFA feature, just no options to customize the security controls around it. So answer is A - PIM.

upvoted 1 times

...

DivG

1 year, 4 months ago

Azure PIM is the correct answer.

upvoted 1 times

...

Aedefix

1 year, 5 months ago

Selected Answer: A

https://www.microsoft.com/en-ca/security/business/microsoft-entra-pricing?ef_id=_k_fbefaf89b2b81fcf43d9ca1f56389099_k_&OCID=AIDcmm4bo1g8yk_SEM__k_fbefaf89b2b81fcf43d9ca1f56389099_k_&msclkid=fbefaf89b2b81fcf43d9ca1f56389099

upvoted 1 times

...

Edgecrusher77

1 year, 8 months ago

Selected Answer: A

A is correct

upvoted 1 times

...

casualbork

1 year, 9 months ago

Selected Answer: A

PIM is correct. It's a P2 Feature

upvoted 2 times

...

HappyMahaseth

1 year, 9 months ago

PIM cis the correct one

upvoted 1 times

...

Datta2023

1 year, 9 months ago

PIM is correct. Check https://www.microsoft.com/en-us/security/business/microsoft-entra-pricing -> Identity Governance -> PIM

upvoted 1 times

...

ChrisBues

1 year, 11 months ago

Selected Answer: A

PIM is correct. MFA is free.

upvoted 1 times

...

ehsanhabib

1 year, 11 months ago

PIM is correct answer

upvoted 1 times

...

zellck

2 years ago

Selected Answer: A

A is the answer. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure#license-requirements Using this feature requires Azure AD Premium P2 licenses.

upvoted 1 times

...

Load full discussion...