nerdexam
Microsoft

MS-900 · Question #433

Drag and Drop Question A company uses Microsoft 365. The company provisions employee user accounts in Active Directory and synchronizes the accounts to Azure Active Directory (Azure AD). The company…

The correct answer is Azure AD Premium P1; Azure AD Premium P1; Azure AD Free. The correct arrangement maps to three user groups: Sales/Contractors (Azure AD Premium P1), Management (Azure AD Premium P1), and the remaining standard employees (Azure AD Free). Azure AD Premium P1 is required for SSPR on-premises writeback (needed for synced employee…

Submitted by wei.xz· Mar 5, 2026Implement and Manage Identity and Access in Microsoft 365 / Azure Active Directory Licensing and Features

Question

Drag and Drop Question A company uses Microsoft 365. The company provisions employee user accounts in Active Directory and synchronizes the accounts to Azure Active Directory (Azure AD). The company provisions contractor user accounts in Azure AD. The company has the following business requirements: - Employees in the sales department and contractors must be enabled for self-service password reset (SSPR). - Employees in management must be enabled for conditional access policies. The company requires a solution that has the least cost. You need to implement the appropriate Azure AD edition for the users. What should you use? To answer, drag the appropriate Azure AD editions to the correct users. Each Azure AD edition may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct match is worth one point. Answer:

Exhibit

MS-900 question #433 exhibit

Answer Area

Drag items

Azure AD FreeAzure AD Premium P1Azure AD Premium P2Office 365 Apps

Correct arrangement

  • Azure AD Premium P1
  • Azure AD Premium P1
  • Azure AD Free

Explanation

The correct arrangement maps to three user groups: Sales/Contractors (Azure AD Premium P1), Management (Azure AD Premium P1), and the remaining standard employees (Azure AD Free). Azure AD Premium P1 is required for SSPR on-premises writeback (needed for synced employee accounts) and for Conditional Access policies - both P1 features - making it the least-cost edition that satisfies both requirements. Azure AD Free is sufficient for users with no special requirements, satisfying the least-cost constraint. Contractors provisioned directly in Azure AD can use SSPR with P1 (cloud-only SSPR is included in P1 and Office 365 Apps, but since employees also need it with writeback, P1 is the unified choice).

Topics

#Azure AD Editions#Self-Service Password Reset#Conditional Access#Identity Management

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice