Azure AD Identity Management Flashcards

Which Azure AD license is required to use Azure AD Privileged Identity Management (PIM)?

Answer: Azure AD Premium P2

Azure AD PIM requires Azure AD Premium P2 licensing for each user who is managed or uses PIM features.

An administrator configures a Conditional Access policy with 'Grant access - Require compliant device'. What happens when a user signs in from a non-enrolled device?

Answer: Access is blocked

When device compliance is required and the device is not Intune-enrolled or compliant, the Conditional Access policy blocks access entirely.

What Azure AD feature enables you to create automatic group membership based on user attribute values such as department or job title?

Answer: Dynamic groups

Dynamic groups use membership rules based on user attributes like department or job title to automatically add or remove members.

Which type of Azure AD group can be assigned Microsoft 365 licenses directly?

Answer: Both Security and Microsoft 365 groups

Both Security groups and Microsoft 365 groups support group-based license assignment in Azure AD.

An organization needs to enforce a minimum password length of 14 characters for all cloud-only Azure AD accounts. Where should this policy be configured?

Answer: Microsoft 365 admin center password policy

Cloud-only Azure AD account password policies (minimum length, complexity) are configured in the Microsoft 365 admin center under Security settings.

Which Azure AD feature detects users whose credentials have been found in dark web breaches and flags them as high-risk?

Answer: Leaked credentials

The Leaked credentials risk detection correlates Azure AD usernames and passwords against known breach databases to flag compromised accounts.