AZ-305 Azure Identity and Access Management Design

Question 1

A company needs to allow users from a partner organization to access Azure resources without creating new accounts. Which Azure AD feature should you recommend?

Accepted Answer

Azure AD B2B collaboration

Answer

Azure AD B2C

Answer

Azure AD Domain Services

Answer

Azure AD Connect

Question 2

Your organization requires that administrative actions on Azure resources be performed only after a second approval is obtained. Which Azure feature fulfills this requirement?

Accepted Answer

Privileged Identity Management (PIM) with approval workflows

Answer

Azure Policy

Answer

Conditional Access

Answer

Azure Blueprints

Question 3

You need to enforce that all users signing in from outside the corporate network must use MFA. Which solution should you design?

Accepted Answer

Conditional Access policies with location-based conditions

Answer

Azure AD Identity Protection risk policies

Answer

Azure AD Password Protection

Answer

Multi-Tenant Azure AD

Question 4

A solution requires managing access to hundreds of Azure resources for groups of users whose membership changes frequently. Which approach minimizes administrative overhead?

Accepted Answer

Use Azure AD groups with RBAC role assignments

Answer

Assign RBAC roles directly to each user

Answer

Create a separate subscription per user group

Answer

Use Azure Policy for identity management

Question 5

Your organization runs a legacy application that uses LDAP for authentication. You want to migrate it to Azure without rewriting the app. Which service should you use?

Accepted Answer

Azure Active Directory Domain Services (Azure AD DS)

Answer

Azure AD B2C

Answer

Azure AD Connect

Answer

Azure AD External Identities

Question 6

You need to design a solution where service-to-service authentication happens without storing credentials in code or configuration files. Which approach is recommended?

Accepted Answer

Use Azure Managed Identities

Answer

Store credentials in Azure Key Vault secrets and retrieve them at runtime

Answer

Create a shared service principal with a certificate

Answer

Use Azure AD B2B for service accounts