AZ-300 Azure Identity & Security

Question 1

Which Azure AD feature allows you to control access to applications based on user, device, location, and risk signals?

Accepted Answer

Conditional Access

Answer

Conditional Access policies evaluate signals like user identity, device compliance, and location to grant, block, or require additional verification for app access.

Question 2

What is the purpose of Azure AD Privileged Identity Management (PIM)?

Accepted Answer

Provide just-in-time elevation of privileged roles with approval and time limits

Answer

PIM enables just-in-time privileged access, requiring users to activate elevated roles for a limited time with optional approval and MFA.

Question 3

Which Azure RBAC role allows full management of all Azure resources but does not allow assignment of roles to others?

Accepted Answer

Contributor

Answer

The Contributor role grants full create/read/update/delete access to resources but cannot assign Azure roles to others — that requires Owner or User Access Administrator.

Question 4

What is a Managed Identity in Azure?

Accepted Answer

An Azure AD identity automatically managed by Azure for authenticating to services without credentials in code

Answer

Managed Identities provide Azure resources with an automatically rotated identity in Azure AD, allowing them to authenticate to other Azure services without storing credentials.

Question 5

Which Azure service stores secrets, keys, and certificates with hardware security module (HSM) backing and fine-grained access control?

Accepted Answer

Azure Key Vault

Answer

Azure Key Vault securely stores and manages secrets, encryption keys, and certificates, with optional HSM-backed key protection and RBAC-based access control.

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 - Microsoft Azure Solutions Architect Practice Test

AZ-300 Azure Identity & Security