MS-102 Identity & Access Management — Questions and Answers

Question 1: What is the main purpose of Microsoft 365 Identity and Access Management?

To create and manage Microsoft Teams.
To control user access and manage identities (Correct answer)
To manage Office applications.
To monitor network traffic.

Correct answer: To control user access and manage identities

Microsoft 365 Identity and Access Management (IAM), primarily driven by Azure Active Directory (now Microsoft Entra ID), is fundamental to securing the entire Microsoft 365 ecosystem. Its main purpose is to ensure that only authorized users can access the right resources at the right time. This involves managing user accounts, authentication methods, roles, and permissions across all Microsoft 365 services, thereby controlling who can do what.

Question 2: Which tool is used for user identity management in Microsoft 365?

Azure Active Directory (Correct answer)
Microsoft Defender.
Microsoft 365 Admin Center.
PowerShell.

Correct answer: Azure Active Directory

Azure Active Directory (Azure AD), now Microsoft Entra ID, is the core identity service for Microsoft 365. It provides comprehensive capabilities for user identity management, including creating and managing user accounts, groups, and roles, as well as handling authentication and authorization for access to Microsoft 365 services and other cloud applications. It serves as the central directory for all user identities within the Microsoft 365 environment.

Question 3: What is the purpose of Multi-Factor Authentication (MFA)?

To provide backup storage.
To secure login processes with more than one factor (Correct answer)
To monitor network traffic.
To allow single sign-on.

Correct answer: To secure login processes with more than one factor

Multi-Factor Authentication (MFA) adds an extra layer of security beyond just a password by requiring users to provide two or more verification factors to gain access to an account. This typically involves something the user knows (password), something the user has (phone, token), and/or something the user is (biometrics). MFA significantly reduces the risk of unauthorized access even if a password is compromised, making login processes much more secure.

MS-102 Identity & Access Management

What is the main purpose of Microsoft 365 Identity and Access Management?

Select your answer