StudyByteLearn
← SC-100: Microsoft Cybersecurity Architect
SC-100 · Identity authentication and access

Practice question 142 of 498 · hard

An administrator has an active role but must satisfy stronger checks when deleting a sensitive directory configuration. Which capability targets that moment?

Choose the single best answer.

  1. A.A longer refresh-token lifetime
  2. B.A mailbox retention label
  3. C.PIM eligibility alone
  4. D.Protected actions using authentication context
Show the answer and explanation

✓ Correct answer

  • Protected actions using authentication context

Protected actions impose checks on supported sensitive operations. PIM eligibility controls activation rather than every action, longer token life weakens rechecking, and mailbox retention does not guard directory operations.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.