MCSE MSCE Identity Management & Access Solutions 4

Question 1

You need to grant an application permission to read all users' calendars in Microsoft 365 without a signed-in user. Which permission type should you assign?

Accepted Answer

Application permission (app role) with admin consent

Answer

Application permissions allow a service to act without a user context and require admin consent due to their broad scope.

Question 2

An enterprise wants to prevent Azure AD users from consenting to third-party apps that request access to company data. What setting should an admin configure?

Accepted Answer

Set user consent settings to 'Do not allow user consent'

Answer

Setting user consent to 'Do not allow user consent' forces all app consent requests to go through admin approval workflows.

Question 3

You are using Azure AD Pass-through Authentication (PTA). Where does the actual password validation occur?

Accepted Answer

On the on-premises Active Directory domain controllers

Answer

PTA forwards the sign-in password validation request to on-premises DCs via lightweight agents; passwords never leave your network.

Question 4

Which Azure AD feature allows an application to verify its identity using a certificate stored in Azure Key Vault instead of a client secret?

Accepted Answer

Certificate-based app credential (client assertion)

Answer

Applications can authenticate to Azure AD using a certificate (client assertion) instead of a shared secret, which is more secure.

Question 5

A company runs workloads in Azure and needs the workload to access Key Vault without storing any credentials in code. What is the recommended solution?

Accepted Answer

Assign a system-assigned managed identity to the resource and grant it Key Vault access

Answer

System-assigned managed identities provide an automatically managed credential tied to the Azure resource, eliminating the need to store secrets.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Identity Management & Access Solutions 4