AZ-304 Azure Identity and Access Management Design 2

Question 1

A hybrid organization wants to sync on-premises Active Directory users to Azure AD. Which tool should you deploy?

Accepted Answer

Azure AD Connect

Answer

Azure AD B2B

Answer

ADFS only

Answer

Azure AD Connect Cloud Sync

Question 2

Which Azure AD feature enables you to define and enforce organizational policies for application access based on conditions like device compliance?

Accepted Answer

Conditional Access

Answer

Access Reviews

Answer

Identity Governance

Answer

Application Proxy

Question 3

Your organization needs to allow customers to sign in using their social identities (Google, Facebook) to access a consumer app. Which Azure AD service should you use?

Accepted Answer

Azure AD B2C

Answer

Azure AD B2B

Answer

Azure AD Domain Services

Answer

Conditional Access

Question 4

What is the recommended approach to assign Azure built-in roles to groups rather than individual users at scale?

Accepted Answer

Dynamic group membership with RBAC assignment

Answer

Direct user assignment

Answer

Azure Policy assignment

Answer

Attribute-based access control only

Question 5

An application needs read access to a specific Azure Storage container. Which principle should guide the scope of the role assignment?

Accepted Answer

Principle of least privilege — assign at the container level

Answer

Assign at subscription level for simplicity

Answer

Assign Owner role at resource group level

Answer

Use storage account key instead of RBAC

Question 6

Which Azure AD Access Review feature helps organizations ensure that users still need their current group memberships or application access over time?

Accepted Answer

Access Reviews

Answer

Identity Protection

Answer

Entitlement Management

Answer

PIM role activation