Azure Identity and Access Management Flashcards
6 cards from real Microsoft Azure Security Engineer Certification practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Azure Identity and Access Management flashcards as text
Which Azure AD feature evaluates sign-in signals such as user location, device, and app to enforce policies like MFA or block access?
Answer: Conditional Access
Conditional Access acts as a policy engine that evaluates signals and enforces access controls like requiring MFA or blocking sign-ins.
Which Azure AD feature uses machine learning to detect risky sign-ins such as leaked credentials and atypical travel?
Answer: Identity Protection
Azure AD Identity Protection uses ML to assign user risk and sign-in risk scores based on behavioral and threat intelligence signals.
What is the primary purpose of Azure Privileged Identity Management (PIM)?
Answer: Enable just-in-time privileged role activation
PIM enables just-in-time activation of privileged roles so users do not have standing access, reducing the attack surface.
Which authentication method is most resistant to real-time phishing attacks because credentials are cryptographically bound to the origin?
Answer: FIDO2 security key
FIDO2 security keys use origin-bound credentials that cannot be replayed by a phishing site because they are tied to the legitimate domain.
Which Azure AD Identity Governance feature allows administrators to periodically certify that user access to resources remains appropriate?
Answer: Access Reviews
Access Reviews enable admins or resource owners to run recertification campaigns and revoke stale access assignments.
Which type of managed identity has a lifecycle independent of any single Azure resource and can be assigned to multiple services?
Answer: User-assigned managed identity
User-assigned managed identities are standalone Azure resources that persist independently and can be shared across multiple workloads.
How this page was made: written with AI tools and published by Nathan Beja, founder of Practice Test Geeks, who is responsible for its content. Exam facts are checked against the official sources listed below. Not reviewed by a subject-matter expert. Editorial policy
Sources & references
Exam facts on this page (fees, format, dates, passing scores) are checked against these official sources; the date is our last check. Editorial policy
- learn.microsoft.com — Test delivery, retake policy, time limit, score validity, eligibility, renewal, exam information · verified Nov 2026