AZ-900 Azure Identity and Security 2

Question 1

Which Azure AD (Microsoft Entra ID) feature requires users to provide two or more verification methods to sign in?

Accepted Answer

Multi-factor authentication

Answer

Single sign-on

Answer

Conditional Access

Answer

Privileged Identity Management

Question 2

What does Single Sign-On (SSO) primarily provide to users?

Accepted Answer

Access to multiple applications with one set of credentials

Answer

Encryption of data at rest

Answer

Automatic VM patching

Answer

Network traffic filtering

Question 3

Which Azure service helps protect privileged accounts by providing just-in-time access?

Accepted Answer

Privileged Identity Management (PIM)

Answer

Azure Bastion

Answer

Azure Firewall

Answer

Network Security Groups

Question 4

What is the term for Microsoft's identity and access management cloud service formerly called Azure Active Directory?

Accepted Answer

Microsoft Entra ID

Answer

Microsoft Defender

Answer

Azure Sentinel

Answer

Microsoft Intune

Question 5

Which feature allows you to enforce policies like 'require MFA when signing in from an untrusted location'?

Accepted Answer

Conditional Access

Answer

Azure Policy

Answer

Resource locks

Answer

Management groups

Question 6

What type of authentication uses a fingerprint or facial recognition instead of a password?

Accepted Answer

Biometric authentication

Answer

Token-based authentication

Answer

Certificate authentication

Answer

Shared key authentication

Question 7

Which Azure AD edition feature provides self-service password reset for users?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Azure Key Vault

Answer

Managed identities

Answer

Service principals