MCSE MSCE Identity Management & Access Solutions 5

Question 1

You need to configure Azure AD so that users who sign in from a risky IP address are automatically required to change their password. Which feature combination achieves this?

Accepted Answer

Azure AD Identity Protection user risk policy set to require password change

Answer

An Identity Protection user risk policy can require a secure password change when user risk (elevated by risky sign-ins) meets the threshold.

Question 2

An organization wants to use Azure AD as an identity provider for a SaaS app that supports SAML 2.0. What must be configured in the SaaS app to trust Azure AD?

Accepted Answer

Azure AD's SAML signing certificate and issuer URI

Answer

For SAML federation, the relying party (SaaS app) must be configured with Azure AD's signing certificate and the issuer (Entity ID) so it can validate SAML assertions.

Question 3

A company needs to provide secure remote access to an on-premises web app without opening firewall ports. Which Azure AD solution enables this?

Accepted Answer

Azure AD Application Proxy

Answer

Azure AD Application Proxy uses outbound connections from an on-premises connector to publish internal apps securely without inbound firewall rules.

Question 4

Which Azure AD Conditional Access session control limits the duration of browser sessions so users must re-authenticate after a specified period of inactivity?

Accepted Answer

Sign-in frequency control

Answer

The sign-in frequency session control in Conditional Access forces re-authentication after a configurable period, regardless of persistent session state.

Question 5

You need to implement entitlement management so that external users can request access to a set of SharePoint sites, Teams, and an app registration as a bundle. What Azure AD object should you create?

Accepted Answer

An access package in Azure AD Entitlement Management

Answer

Access packages in Entitlement Management bundle multiple resources (groups, apps, SharePoint sites) and allow external users to request access through a self-service workflow.

(MCSE) Microsoft Certified Solutions Expert Practice Test

(MCSE) Microsoft Certified Solutions Expert Practice Test

MCSE MSCE Identity Management & Access Solutions 5