Microsoft Azure Security Engineer Certification Azure Identity and Access Management 1

Question 1

Which Azure AD feature evaluates sign-in signals such as user location, device, and app to enforce policies like MFA or block access?

Accepted Answer

Conditional Access

Answer

Conditional Access acts as a policy engine that evaluates signals and enforces access controls like requiring MFA or blocking sign-ins.

Question 2

Which Azure AD feature uses machine learning to detect risky sign-ins such as leaked credentials and atypical travel?

Accepted Answer

Identity Protection

Answer

Azure AD Identity Protection uses ML to assign user risk and sign-in risk scores based on behavioral and threat intelligence signals.

Question 3

What is the primary purpose of Azure Privileged Identity Management (PIM)?

Accepted Answer

Enable just-in-time privileged role activation

Answer

PIM enables just-in-time activation of privileged roles so users do not have standing access, reducing the attack surface.

Question 4

Which authentication method is most resistant to real-time phishing attacks because credentials are cryptographically bound to the origin?

Accepted Answer

FIDO2 security key

Answer

FIDO2 security keys use origin-bound credentials that cannot be replayed by a phishing site because they are tied to the legitimate domain.

Question 5

Which Azure AD Identity Governance feature allows administrators to periodically certify that user access to resources remains appropriate?

Accepted Answer

Access Reviews

Answer

Access Reviews enable admins or resource owners to run recertification campaigns and revoke stale access assignments.

Microsoft Azure Security Engineer Certification Practice Test