SC-100 Certification Practice Question #11

Question

You have a customer that has a Microsoft 365 subscription and uses the Free edition of Azure Active Directory (Azure AD).
The customer plans to obtain an Azure subscription and provision several Azure resources.
You need to evaluate the customer's security environment.
What will necessitate an upgrade from the Azure AD Free edition to the Premium edition?

Accepted Answer

The question asks which feature *necessitates* an upgrade from Azure AD Free to Premium. PIM is the only listed feature that requires a paid tier — MS Learn states PIM needs Microsoft Entra ID P2 (or Entra ID Governance). MFA (D) does not necessitate an upgrade because the Free edition's Security Defaults already provide MFA enforcement; only granular MFA via Conditional Access requires P1. Role-based and resource-based authorization (B, C) are Azure RBAC concepts that don't require Entra Premium. The community is essentially unanimous (123 votes, two strongly upvoted Highly Voted comments) and aligns with the Suggested Answer and MS Learn, so confidence is high.

More SC-100 practice questions