AZ-900 Practice Question 57: Single Sign on
Microsoft Azure Fundamentals (AZ-900) · Test 6 · question 7 of 10
Employees sign in separately to eight different business applications, each with its own password, and the help desk is swamped with password resets. Which capability addresses this directly?
Show answer and explanation
Answer:
Single sign-on lets users sign in once and reach many applications with one set of credentials; after signing in they can open every assigned application without signing in again, because Microsoft Entra ID verifies the user and confirms their identity to each app. Microsoft lists precisely the outcomes the stem is asking for: a better user experience with fewer credentials, stronger security because central sign-in limits credential exposure, easier access management from one identity provider, and less support overhead, with fewer password resets reaching the help desk.
Option A would *add* a prompt to each of the eight applications rather than removing seven sign-ins; MFA strengthens a sign-in but does not reduce how many there are. Option B, Conditional Access, decides whether and under what conditions a sign-in is permitted; it presupposes the sign-in and consolidates no credentials. Option C, Azure RBAC, authorizes what an already-authenticated identity may do to Azure resources, which has no bearing on how many times a user types a password into third-party applications.