Free Microsoft Security SC-900 Actual Exam Questions - Question 3 Discussion

I’m thinking A might be No because self-service password reset isn’t fully available in the free tier, right? So unless specified, it’s safer to say No here. B is definitely Yes for MFA as a default. For C, I’m also doubting it since not every app connects straight away with Azure AD without some setup. D has to be No because passwordless sign-in requires additional steps to activate, so it can’t be on by default.

I’d say B is definitely Yes because MFA is a core security default now. For C, I’m skeptical since not every app integrates with Azure AD by default—usually some config’s needed.

B seems like a safe Yes since Azure AD does support multi-factor authentication as a security default. C feels off because not all apps automatically use Azure AD for authentication without extra steps.

D is a no since enabling passwordless requires explicit configuration.

I’m with those saying No for D, passwordless isn’t on by default and requires setup. For A, I’d say Yes since self-service password reset is a common baseline feature in Azure AD, even if some advanced options need Premium. B and C fit well too because conditional access and MFA definitely kick in with Premium licenses. The question doesn’t say Free or Premium, but assuming it’s about default capabilities, A, B, and C are likely Yes while D is No.

I agree with ruling out D since passwordless setups aren’t default and need extra config, so No there. For A, I’m thinking it’s a Yes because self-service password reset is generally available in Azure AD, but some features might be limited without Premium licenses. B and C both seem like Yes because conditional access and MFA are core Azure AD Premium features, so they’d be true if the question targets Premium specifically. Without knowing the exact license level, it’s tricky, but I’d trust B and C as Yes and D as No based on typical Azure AD capabilities.

I think D should be a no because passwordless authentication needs extra setup and isn’t just on by default. That makes it less likely compared to the others.

I’d say B and C seem solid since they refer to conditional access and MFA, which are definitely features tied to Azure AD Premium. A feels off because self-service password reset isn’t always available depending on the license. Also, the wording of A sounds like it might be mixing up standard password policies with Azure AD-specific controls. So I’d skip A here and go with B and C as yes.

B and C, no on A.