EarnYourCert
Open the app
Exams › SC-500 › Domain 1 of 4
SC-500 · Domain 1 of 4 · 20-25% of the exam

Manage identity, access, and governance

Domain 1 of SC-500 accounts for 20-25% of the exam. EarnYourCert has 92 original questions for this domain, all with explanations: 61 multiple choice, 17 yes/no and 14 completion or ordering items, like the real exam.

Practice domain 1 for free →No sign-up. Choose how many questions you want.

Domain 1 sample questions

8 questions from our 92-question bank for this domain. Try to answer before revealing the solution.

1. Which Entra feature helps you detect users with risky sign-ins so Conditional Access can respond automatically?

  1. Microsoft Entra access reviews
  2. Microsoft Entra ID Protection
  3. Microsoft Entra Connect Health
  4. Privileged Identity Management
Show answer

Correct answer: B. Risk signals feed Conditional Access policies.

2. Which Entra setting limits which users can register applications in the tenant?

  1. Group naming policy applied to app-related security groups
  2. User settings: Users can register applications = No
  3. External collaboration settings for guest invitations
  4. Cross-tenant access settings
Show answer

Correct answer: B. Restricting registration reduces shadow apps.

3. Which Key Vault feature automatically rotates keys on a schedule?

  1. Key Vault access policies
  2. Soft delete
  3. Key rotation policy
  4. A diagnostic setting
Show answer

Correct answer: C. Automatic rotation reduces key age and risk.

4. Which Defender CSPM capability detects exposed secrets such as SSH private keys or API tokens on VMs and in repositories?

  1. Vulnerability assessment
  2. Secrets scanning
  3. Attack path analysis
  4. Just-in-time access
Show answer

Correct answer: B. Secrets scanning supports attack path analysis.

5. Which Key Vault object type stores X.509 certificates with lifecycle management?

  1. Keys
  2. Access policies
  3. Secrets
  4. Certificates
Show answer

Correct answer: D. Key Vault stores secrets, keys and certificates.

6. Which Azure feature identifies and helps remove unused or excessive permissions from Azure role assignments?

  1. Permissions analytics / overprivileged access recommendations
  2. Microsoft Entra access reviews for guest users
  3. Azure Policy compliance view
  4. Azure Advisor cost recommendations
Show answer

Correct answer: A. Right-sizing permissions reduces risk.

7. Which Azure Policy feature lets you define your own rules when no built-in definition meets the requirement?

  1. Policy exemptions
  2. Built-in initiatives only
  3. Management group deployments only
  4. Custom policy definitions
Show answer

Correct answer: D. Custom policies express organization-specific rules in JSON.

8. Which policy effect can deploy diagnostic settings automatically to existing resources through remediation?

  1. Append
  2. DeployIfNotExists
  3. Audit
  4. Deny
Show answer

Correct answer: B. DeployIfNotExists uses a managed identity and remediation tasks to fix existing resources.

Practice domain 1 for free →

Other SC-500 domains

2Secure storage, databases, and networking25-30% 3Secure compute20-25% 4Manage and monitor security posture20-25% SC-500: full practice exam→