Practice Test GeeksMD-102 - Endpoint Administrator Exam Practice Test
← All MD-102 Flashcard Decks

Managing Identity and Access Flashcards

6 cards from real MD-102 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Managing Identity and Access flashcards as text

  1. An administrator wants to require devices to be Azure AD joined before granting access to a SharePoint site. Which policy type should be used?

    Answer: Azure AD Conditional Access policy

    An Azure AD Conditional Access policy can require a device to be Azure AD joined as a condition before granting access to specific cloud apps like SharePoint.

  2. A user has left the organization. Which action should an administrator take in Azure AD to immediately prevent the user from signing in?

    Answer: Disable the user account

    Disabling the user account in Azure AD immediately prevents sign-in while preserving the account, licenses, and data for potential recovery.

  3. Which Azure AD feature can automatically detect risky sign-in events and prompt for MFA or block access based on a risk score?

    Answer: Identity Protection

    Azure AD Identity Protection evaluates sign-in risk using machine learning and can automatically enforce MFA or block access based on the detected risk level.

  4. An organization uses Hybrid Azure AD Join. What tool is used to synchronize on-premises AD accounts to Azure AD?

    Answer: Azure AD Connect

    Azure AD Connect is the Microsoft tool that synchronizes on-premises Active Directory identities, including device objects, to Azure AD.

  5. Which license is required to use Azure AD Privileged Identity Management (PIM)?

    Answer: Azure AD Premium P2

    Azure AD Privileged Identity Management requires Azure AD Premium P2 licenses to provide just-in-time privileged access management.

  6. A Windows 10 device is Azure AD joined. A user wants to use Windows Hello for Business. What is required for cloud-only deployments?

    Answer: Azure AD Premium P1 license

    Windows Hello for Business cloud-only deployments require Azure AD Premium P1 to support the certificate trust or key trust models.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Renewal, score validity, score release, eligibility, fees, time limit, exam format · verified Nov 2026
  2. home.pearsonvue.com — Test delivery · verified Nov 2026