AZ-305 Azure Identity and Access Management Design

Question 1

A company needs to allow users from a partner organization to access Azure resources without creating new accounts. Which Azure AD feature should you recommend?

Accepted Answer

Azure AD B2B collaboration

Answer

Azure AD B2B collaboration lets you invite external users from partner organizations to access your Azure resources using their existing identities.

Question 2

Your organization requires that administrative actions on Azure resources be performed only after a second approval is obtained. Which Azure feature fulfills this requirement?

Accepted Answer

Privileged Identity Management (PIM) with approval workflows

Answer

PIM approval workflows require a designated approver to authorize role activation before an admin can perform privileged actions.

Question 3

You need to enforce that all users signing in from outside the corporate network must use MFA. Which solution should you design?

Accepted Answer

Conditional Access policies with location-based conditions

Answer

Conditional Access policies can target named locations to require MFA only when users authenticate from outside trusted IP ranges.

Question 4

A solution requires managing access to hundreds of Azure resources for groups of users whose membership changes frequently. Which approach minimizes administrative overhead?

Accepted Answer

Use Azure AD groups with RBAC role assignments

Answer

Assigning RBAC roles to Azure AD groups means you only manage group membership rather than updating individual role assignments as users change.

Question 5

Your organization runs a legacy application that uses LDAP for authentication. You want to migrate it to Azure without rewriting the app. Which service should you use?

Accepted Answer

Azure Active Directory Domain Services (Azure AD DS)

Answer

Azure AD DS provides managed domain services including LDAP, Kerberos, and NTLM so legacy apps can authenticate without code changes.

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 - Designing Microsoft Azure Infrastructure Solutions Practice Test

AZ-305 Azure Identity and Access Management Design