StudyToCert

All certifications / SC-300 / Lessons

Microsoft Certified: Identity and Access Administrator Associate SC-300 (skills outline of April 27, 2026) · Domain 2: Implement authentication and access management

Microsoft Entra Password Protection: global and custom banned password lists, smart lockout, on-premises DC agent and proxy

▶ Watch the overview video

Last reviewed September 25, 2026 · Leer en español

Many breaches start with password spraying: an attacker tries a few common passwords, such as a season plus a year, against many accounts. Microsoft Entra Password Protection makes those guessable passwords impossible to set, and smart lockout slows down guessing without locking out real users.

Free account

Keep reading for free

Create a free StudyToCert account to read the rest of this lesson: 5 more sections, 5 key terms, a real-world example, an exam tip and self-check questions. Every lesson, lab and practice test is free with an account.

Sign up free Log in

Study SC-300 for free
A week-by-week plan with every lesson, quizzes, checkpoint tests, a practice exam and hands-on labs.
Open the SC-300 study plan