MCSE MSCE Identity Management & Access Solutions 2

Question 1

A company needs to allow external partners to access internal SharePoint sites without creating AD accounts for them. Which Azure AD feature should you configure?

Accepted Answer

Azure AD B2B collaboration

Answer

Azure AD B2C

Answer

Azure AD Domain Services

Answer

AD FS claim rules

Question 2

You want to enforce that users can only register MFA methods from a corporate network. Which Azure AD feature enforces this?

Accepted Answer

Conditional Access policy with network location condition

Answer

Azure AD Identity Protection risk policy

Answer

MFA trusted IPs in legacy MFA settings

Answer

Authentication strengths policy

Question 3

An administrator needs to review which users have been assigned the Global Administrator role over the last 90 days. Where is this information found?

Accepted Answer

Azure AD Privileged Identity Management — Role assignment history

Answer

Azure AD Sign-in logs

Answer

Azure AD Audit logs

Answer

Microsoft Entra Permissions Management

Question 4

Which token type does Azure AD issue that contains a user's group memberships and is used by resource applications to make authorization decisions?

Accepted Answer

Access token

Answer

Refresh token

Answer

ID token

Answer

SAML assertion

Question 5

Your organization uses AD FS. You want to migrate relying party trusts to Azure AD without disrupting users. Which tool automates the compatibility assessment?

Accepted Answer

AD FS Migration Toolkit (AD FS application activity report)

Answer

Azure AD Connect Health

Answer

Microsoft Entra Application Proxy

Answer

Azure Migrate

Question 6

A Conditional Access policy is set to require a compliant device. A user with a non-compliant device tries to access Exchange Online. What is the result?

Accepted Answer

Access is blocked regardless of MFA completion

Answer

The user is prompted for MFA and then granted access

Answer

The user is redirected to Intune enrollment automatically

Answer

The user receives a time-limited access token

Question 7

You need to synchronize on-premises AD password hashes to Azure AD so users can sign in to cloud apps with the same password. Which sync method should you enable?

Accepted Answer

Password Hash Synchronization

Answer

Pass-through Authentication

Answer

AD FS federation

Answer

Azure AD Seamless SSO only