StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 121 of 498 · easy

A user signs in through Entra SSO to a SaaS app. What still controls which business records the user may edit?

Choose the single best answer.

  1. A.The application’s authorization and role model
  2. B.The fact that the application is assigned to the tenant
  3. C.The user’s successful first-factor authentication alone
  4. D.A Conditional Access MFA result without application permissions
Show the answer and explanation

✓ Correct answer

  • The application’s authorization and role model

The application role/permission model governs record editing. First-factor authentication and MFA establish authentication assurance; tenant integration alone does not authorize every user action.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.