Azure Identity and Access Management Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Identity and Access Management flashcards as text
What is the default number of failed sign-in attempts that triggers Azure AD Smart Lockout?
Answer: 10 attempts
Azure AD Smart Lockout locks accounts after 10 failed attempts by default, tracking familiar and unfamiliar locations separately.
Which Azure AD Identity Governance feature automates access request, approval, and expiration for external B2B guest users?
Answer: Entitlement Management access packages
Entitlement Management access packages bundle resources with policies and lifecycle settings, including expiration for guest users.
What does enabling Azure AD Security Defaults enforce across all users in a tenant?
Answer: Requires MFA registration for all users and blocks legacy authentication
Security Defaults require all users to register for MFA and block legacy authentication protocols that cannot enforce modern MFA.
Which Azure AD capability revokes tokens in near real-time when critical events such as user disablement occur, without waiting for token expiry?
Answer: Continuous Access Evaluation (CAE)
Continuous Access Evaluation allows resource providers to reject tokens immediately when the issuing authority signals a critical change.
Which type of named location in Conditional Access is used to define trusted corporate network boundaries?
Answer: IPv4 or IPv6 IP ranges
IP range-based named locations define trusted corporate networks, and marking them as trusted can reduce MFA prompts for users on-premises.
Which Azure AD feature allows B2B federation with an external organization's SAML 2.0 or WS-Fed identity provider?
Answer: Direct Federation with SAML or WS-Fed
Direct Federation enables Azure AD B2B to trust an external SAML 2.0 or WS-Fed IdP so guest users authenticate with their own organization.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026