MS-100 Azure AD Identity Management

Question 1

Which Azure AD feature allows you to enforce multi-factor authentication based on user location, device compliance, and application sensitivity?

Accepted Answer

Conditional Access

Answer

Conditional Access policies evaluate signals like location, device state, and app sensitivity to grant or block access with MFA requirements.

Question 2

An administrator needs to provide just-in-time privileged access to Azure resources with approval workflows. Which Azure AD feature should they use?

Accepted Answer

Privileged Identity Management (PIM)

Answer

PIM provides just-in-time privileged access with approval workflows, time-limited assignments, and audit trails for Azure AD and Azure resources.

Question 3

What is the maximum number of objects that can be synchronized to a single Azure AD tenant using Azure AD Connect?

Accepted Answer

500,000

Answer

A single Azure AD tenant supports up to 500,000 objects when synchronized using Azure AD Connect from an on-premises directory.

Question 4

Which Azure AD Identity Protection risk detection identifies sign-ins from anonymous IP addresses such as Tor browsers?

Accepted Answer

Anonymous IP address

Answer

The Anonymous IP address risk detection flags sign-ins originating from anonymous proxies or Tor network exit nodes.

Question 5

A company wants to allow external partners to access specific SharePoint sites without creating guest accounts in Azure AD. Which feature enables this?

Accepted Answer

Entitlement Management with connected organizations

Answer

Entitlement Management with connected organizations allows external partners to request access to resources using their own organizational credentials.

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 - Microsoft 365 Identity and Services Practice Test

MS-100 Azure AD Identity Management