MCSE MSCE Identity Management & Access Solutions 2

Question 1

A company needs to allow external partners to access internal SharePoint sites without creating AD accounts for them. Which Azure AD feature should you configure?

Accepted Answer

Azure AD B2B collaboration

Answer

Azure AD B2B collaboration lets you invite external users using their own identity provider without managing their credentials.

Question 2

You want to enforce that users can only register MFA methods from a corporate network. Which Azure AD feature enforces this?

Accepted Answer

Conditional Access policy with network location condition

Answer

A Conditional Access policy with a named location (network) condition can restrict MFA registration to trusted networks.

Question 3

An administrator needs to review which users have been assigned the Global Administrator role over the last 90 days. Where is this information found?

Accepted Answer

Azure AD Privileged Identity Management — Role assignment history

Answer

PIM maintains a detailed history of role assignments and activations, making it the correct source for this audit.

Question 4

Which token type does Azure AD issue that contains a user's group memberships and is used by resource applications to make authorization decisions?

Accepted Answer

Access token

Answer

Access tokens contain claims such as group memberships and are presented to resource APIs to authorize requests.

Question 5

Your organization uses AD FS. You want to migrate relying party trusts to Azure AD without disrupting users. Which tool automates the compatibility assessment?

Accepted Answer

AD FS Migration Toolkit (AD FS application activity report)

Answer

The AD FS application activity report in Azure AD analyzes relying party trusts and flags any that need remediation before migration.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Identity Management & Access Solutions 2