MCSE MSCE Identity Management & Access Solutions 3

Question 1

You are configuring Azure AD Connect and need users to sign in with their on-premises UPN suffix, which is non-routable (e.g., corp.local). What should you do?

Accepted Answer

Change the on-premises UPN suffix to match a verified Azure AD domain

Answer

Azure AD requires a routable, verified domain for UPNs; the on-premises suffix must be updated to a domain verified in Azure AD.

Question 2

Which Azure AD Identity Protection signal automatically elevates a sign-in risk level when credentials are detected in a known breach database?

Accepted Answer

Leaked credentials

Answer

The 'Leaked credentials' detection fires when Azure AD finds a user's credentials in publicly exposed breach data.

Question 3

An application registered in Azure AD uses the client credentials flow. Which entity authenticates in this flow?

Accepted Answer

The application itself using its own identity

Answer

Client credentials flow is a daemon/service pattern where the application authenticates as itself using a client secret or certificate.

Question 4

You want to ensure that users in the Sales group can only access Salesforce from managed devices and only during business hours. Which Azure AD feature should you use?

Accepted Answer

Conditional Access policy targeting the Sales group with device and time conditions

Answer

Conditional Access policies support targeting specific groups and combining device compliance with named location/time-based conditions.

Question 5

When configuring Azure AD Privileged Identity Management for a role, what is the 'activation maximum duration' setting?

Accepted Answer

The maximum time a user can keep a role active after requesting it

Answer

Activation maximum duration limits how many hours an eligible user can hold a role active before it automatically deactivates.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Identity Management & Access Solutions 3