AZ-900 Azure Identity and Security 2

Question 1

Which Azure AD (Microsoft Entra ID) feature requires users to provide two or more verification methods to sign in?

Accepted Answer

Multi-factor authentication

Answer

Multi-factor authentication (MFA) requires two or more verification methods such as a password plus a phone approval.

Question 2

What does Single Sign-On (SSO) primarily provide to users?

Accepted Answer

Access to multiple applications with one set of credentials

Answer

SSO lets users authenticate once and access multiple connected applications without signing in again.

Question 3

Which Azure service helps protect privileged accounts by providing just-in-time access?

Accepted Answer

Privileged Identity Management (PIM)

Answer

PIM provides just-in-time, time-limited activation of privileged roles to reduce standing access.

Question 4

What is the term for Microsoft's identity and access management cloud service formerly called Azure Active Directory?

Accepted Answer

Microsoft Entra ID

Answer

Azure Active Directory was renamed Microsoft Entra ID and provides cloud identity and access management.

Question 5

Which feature allows you to enforce policies like 'require MFA when signing in from an untrusted location'?

Accepted Answer

Conditional Access

Answer

Conditional Access enforces access controls based on signals such as location, device, and risk.

AZ-900 Practice Test