MS-102 Identity & Access Management

Question 1

What is the main purpose of Microsoft 365 Identity and Access Management?

Accepted Answer

To control user access and manage identities

Answer

Microsoft 365 Identity and Access Management (IAM), primarily driven by Azure Active Directory (now Microsoft Entra ID), is fundamental to securing the entire Microsoft 365 ecosystem. Its main purpose is to ensure that only authorized users can access the right resources at the right time. This involves managing user accounts, authentication methods, roles, and permissions across all Microsoft 365 services, thereby controlling who can do what.

Question 2

Which tool is used for user identity management in Microsoft 365?

Accepted Answer

Azure Active Directory

Answer

Azure Active Directory (Azure AD), now Microsoft Entra ID, is the core identity service for Microsoft 365. It provides comprehensive capabilities for user identity management, including creating and managing user accounts, groups, and roles, as well as handling authentication and authorization for access to Microsoft 365 services and other cloud applications. It serves as the central directory for all user identities within the Microsoft 365 environment.

Question 3

What is the purpose of Multi-Factor Authentication (MFA)?

Accepted Answer

To secure login processes with more than one factor

Answer

Multi-Factor Authentication (MFA) adds an extra layer of security beyond just a password by requiring users to provide two or more verification factors to gain access to an account. This typically involves something the user knows (password), something the user has (phone, token), and/or something the user is (biometrics). MFA significantly reduces the risk of unauthorized access even if a password is compromised, making login processes much more secure.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Identity & Access Management