Microsoft Azure Security Engineer Certification Azure Identity and Access Management

Question 1

Which Azure AD feature evaluates sign-in signals such as user location, device, and app to enforce policies like MFA or block access?

Accepted Answer

Conditional Access

Answer

Identity Protection

Answer

Privileged Identity Management

Answer

Access Reviews

Question 2

Which Azure AD feature uses machine learning to detect risky sign-ins such as leaked credentials and atypical travel?

Accepted Answer

Identity Protection

Answer

Conditional Access

Answer

Azure Sentinel

Answer

Defender for Identity

Question 3

What is the primary purpose of Azure Privileged Identity Management (PIM)?

Accepted Answer

Enable just-in-time privileged role activation

Answer

Log all administrator actions

Answer

Enforce MFA for all users

Answer

Manage external guest users

Question 4

Which authentication method is most resistant to real-time phishing attacks because credentials are cryptographically bound to the origin?

Accepted Answer

FIDO2 security key

Answer

SMS one-time passcode

Answer

Authenticator app TOTP

Answer

Email one-time passcode

Question 5

Which Azure AD Identity Governance feature allows administrators to periodically certify that user access to resources remains appropriate?

Accepted Answer

Access Reviews

Answer

Conditional Access

Answer

Privileged Identity Management

Answer

Identity Protection

Question 6

Which type of managed identity has a lifecycle independent of any single Azure resource and can be assigned to multiple services?

Accepted Answer

User-assigned managed identity

Answer

System-assigned managed identity

Answer

Service principal

Answer

Federated identity credential