Microsoft Azure Security Engineer Certification Azure Identity and Access Management 2

Question 1

What is the minimum Azure AD license tier required to create and enforce Conditional Access policies?

Accepted Answer

Azure AD Premium P1

Answer

Conditional Access requires Azure AD Premium P1 or higher; P2 adds Identity Protection risk-based policies and PIM.

Question 2

Which Conditional Access session control determines how frequently users must reauthenticate?

Accepted Answer

Sign-in frequency

Answer

The Sign-in Frequency session control specifies the time period after which users are asked to sign in again.

Question 3

Which Azure AD feature maintains a global and custom banned password list to block weak or compromised passwords?

Accepted Answer

Password Protection

Answer

Azure AD Password Protection blocks known weak passwords and allows organizations to add custom banned terms.

Question 4

Which Azure AD permission type allows an app to access resources on behalf of a signed-in user?

Accepted Answer

Delegated permissions

Answer

Delegated permissions let an application act on behalf of a signed-in user and are constrained by that user's own permissions.

Question 5

Which Azure AD log type records authentication events including user, IP address, risk level, and success or failure?

Accepted Answer

Azure AD Sign-in Logs

Answer

Azure AD Sign-in Logs capture all authentication attempts with details on user, location, device, app, and risk signals.

Microsoft Azure Security Engineer Certification Practice Test