AZ-304 Azure Identity and Access Management Design

Question 1

Which Azure AD feature allows you to enforce multi-factor authentication based on user risk and sign-in risk signals?

Accepted Answer

Identity Protection

Answer

Conditional Access

Answer

Azure AD B2C

Answer

Azure AD DS

Question 2

A company needs to provide external partners with access to Azure resources without managing their identities in Azure AD. Which solution should you recommend?

Accepted Answer

Azure AD B2B

Answer

Azure AD B2C

Answer

Azure AD DS

Answer

Azure AD Connect

Question 3

Which role-based access control scope is the HIGHEST level in the Azure RBAC hierarchy?

Accepted Answer

Management Group

Answer

Resource Group

Answer

Subscription

Answer

Resource

Question 4

You need to grant an application access to Azure Key Vault secrets without storing credentials in code. What should you use?

Accepted Answer

Managed Identity

Answer

Service Principal with client secret

Answer

Azure AD Application Proxy

Answer

Shared Access Signature

Question 5

What is the purpose of Privileged Identity Management (PIM) in Azure AD?

Accepted Answer

To provide just-in-time privileged access to Azure resources

Answer

To synchronize on-premises AD with Azure AD

Answer

To enforce password complexity policies

Answer

To audit all sign-in events

Question 6

Which authentication method in Azure AD provides passwordless sign-in using a private key stored on a hardware device?

Accepted Answer

FIDO2 security keys

Answer

OATH software tokens

Answer

SMS verification

Answer

App passwords