← All Microsoft Azure Security Engineer Certification Flashcard Decks

Azure Identity and Access Management Flashcards

6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Azure Identity and Access Management flashcards as text
  1. What is the minimum Azure AD license tier required to create and enforce Conditional Access policies?

    Answer: Azure AD Premium P1

    Conditional Access requires Azure AD Premium P1 or higher; P2 adds Identity Protection risk-based policies and PIM.

  2. Which Conditional Access session control determines how frequently users must reauthenticate?

    Answer: Sign-in frequency

    The Sign-in Frequency session control specifies the time period after which users are asked to sign in again.

  3. Which Azure AD feature maintains a global and custom banned password list to block weak or compromised passwords?

    Answer: Password Protection

    Azure AD Password Protection blocks known weak passwords and allows organizations to add custom banned terms.

  4. Which Azure AD permission type allows an app to access resources on behalf of a signed-in user?

    Answer: Delegated permissions

    Delegated permissions let an application act on behalf of a signed-in user and are constrained by that user's own permissions.

  5. Which Azure AD log type records authentication events including user, IP address, risk level, and success or failure?

    Answer: Azure AD Sign-in Logs

    Azure AD Sign-in Logs capture all authentication attempts with details on user, location, device, app, and risk signals.

  6. Which PIM capability requires designated approvers to authorize a user's request before a privileged role becomes active?

    Answer: PIM approval workflow

    Configuring an approval workflow in PIM role settings means activation requests are held until an approver grants them.

How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy

Sources & references

Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy

  1. learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026