Azure Identity and Access Management Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Identity and Access Management flashcards as text
What is the minimum Azure AD license tier required to create and enforce Conditional Access policies?
Answer: Azure AD Premium P1
Conditional Access requires Azure AD Premium P1 or higher; P2 adds Identity Protection risk-based policies and PIM.
Which Conditional Access session control determines how frequently users must reauthenticate?
Answer: Sign-in frequency
The Sign-in Frequency session control specifies the time period after which users are asked to sign in again.
Which Azure AD feature maintains a global and custom banned password list to block weak or compromised passwords?
Answer: Password Protection
Azure AD Password Protection blocks known weak passwords and allows organizations to add custom banned terms.
Which Azure AD permission type allows an app to access resources on behalf of a signed-in user?
Answer: Delegated permissions
Delegated permissions let an application act on behalf of a signed-in user and are constrained by that user's own permissions.
Which Azure AD log type records authentication events including user, IP address, risk level, and success or failure?
Answer: Azure AD Sign-in Logs
Azure AD Sign-in Logs capture all authentication attempts with details on user, location, device, app, and risk signals.
Which PIM capability requires designated approvers to authorize a user's request before a privileged role becomes active?
Answer: PIM approval workflow
Configuring an approval workflow in PIM role settings means activation requests are held until an approver grants them.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026