MCSD Authentication, Authorization & Identity 2

Question 1

Azure AD B2C is best suited for which scenario?

Accepted Answer

Providing consumer-facing identity management with social and local account sign-in

Answer

Azure AD B2C (Business-to-Consumer) is designed for customer-facing applications, supporting social identity providers (Google, Facebook) and local accounts with customizable user flows.

Question 2

In Azure Role-Based Access Control (RBAC), which built-in role grants full access to manage all resources but does NOT allow the user to assign roles to others?

Accepted Answer

Contributor

Answer

The Contributor role grants full access to create and manage all types of Azure resources but does not allow granting access to others, unlike the Owner role which includes role assignment permissions.

Question 3

What is a Managed Identity in Azure, and what problem does it solve?

Accepted Answer

An Azure AD identity assigned to an Azure resource that eliminates the need to store credentials in code

Answer

A Managed Identity provides Azure services with an automatically managed identity in Azure AD, enabling secure authentication to services that support Azure AD without storing credentials in code or configuration.

Question 4

Which Azure AD Conditional Access policy condition would block access when a user's sign-in risk level is detected as 'High' by Azure AD Identity Protection?

Accepted Answer

Sign-in risk policy with block access action

Answer

A Sign-in Risk Conditional Access policy evaluates the real-time risk of a specific sign-in attempt and can block access when the detected sign-in risk level meets the configured threshold (e.g., High).

Question 5

When using the Client Credentials Flow in OAuth 2.0, who or what is authenticated?

Accepted Answer

The application itself using its own credentials (client ID and secret)

Answer

The Client Credentials Flow is a machine-to-machine flow where the application authenticates as itself using its client ID and secret (or certificate), with no user involved in the authentication process.

MCSD - Microsoft Certified Solutions Developer Practice Test

MCSD - Microsoft Certified Solutions Developer Practice Test

MCSD Authentication, Authorization & Identity 2