MD-102 Managing Identity and Access

Question 1

Which Azure AD feature allows users to register their Windows 10 devices so they can access organizational resources with a personal device?

Accepted Answer

Azure AD Registered

Answer

Azure AD Join

Answer

Hybrid Azure AD Join

Answer

Workplace Join

Question 2

A user needs to sign in to Windows 10 using Windows Hello for Business. Which authentication method does Windows Hello for Business replace?

Accepted Answer

Password-based authentication

Answer

Smart card authentication

Answer

Certificate-based authentication

Answer

RADIUS authentication

Question 3

An administrator needs to ensure that only compliant devices can access Microsoft 365 resources. Which Azure AD feature should be configured?

Accepted Answer

Conditional Access

Answer

Identity Protection

Answer

Privileged Identity Management

Answer

Access Reviews

Question 4

Which join type requires an on-premises Active Directory domain and Azure AD tenant to both have a trust relationship via Azure AD Connect?

Accepted Answer

Hybrid Azure AD Join

Answer

Azure AD Join

Answer

Azure AD Registered

Answer

Workgroup Join

Question 5

A company wants to enforce multi-factor authentication for all admin sign-ins to Azure AD. What is the simplest way to enforce this for all global administrators?

Accepted Answer

Security defaults

Answer

Per-user MFA

Answer

Conditional Access policy

Answer

Identity Protection policy

Question 6

Which Self-Service Password Reset (SSPR) setting allows users to reset their password using an authenticator app notification?

Accepted Answer

Mobile app notification

Answer

Email authentication

Answer

Security questions

Answer

Office phone