SC-100 Certification Practice Question #277

Question

You need to recommend an identity security solution for the Azure AD tenant of Litware. The solution must meet the identity requirements and the regulatory compliance requirements.
What should you recommend? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Both rows are corroborated by MS Learn and a near-unanimous, heavily-voted community (19 + 12 👍, plus three more confirmations). Administrative units are the purpose-built Azure AD construct for delegating management of a scoped subset of users and groups, which OUs (on-prem only) and custom roles (permissions, not scope) do not provide. Leaked-credential detection in Microsoft Entra ID Protection only matches credentials when password hash synchronization is enabled for hybrid users — Security defaults and AD FS federation do not enable it, and AD FS is the opposite of what is needed. No meaningful dissent exists in the thread.

More SC-100 practice questions