Azure AD Identity Management Flashcards

What is the purpose of the Azure AD Application Proxy?

Answer: Publishing on-premises web apps securely to external users

Azure AD Application Proxy allows remote users to access on-premises web applications securely without requiring a VPN or DMZ.

A Global Administrator wants to delegate the ability to reset user passwords without granting full admin rights. Which role should be assigned?

Answer: Password Administrator

The Password Administrator role allows resetting passwords for non-administrator users without the broader permissions of User Administrator.

Which Azure AD feature allows you to set expiration dates on Microsoft 365 groups to prevent unused groups from accumulating?

Answer: Group lifecycle policies

Group expiration policies in Azure AD automatically prompt owners to renew groups at defined intervals, deleting them if not renewed.

What does the Azure AD 'Sign-in risk' policy in Identity Protection evaluate?

Answer: The probability that a specific authentication request was not initiated by the account owner

Sign-in risk evaluates the likelihood that a specific sign-in request was not made by the legitimate account owner based on behavioral and threat intelligence signals.

An administrator needs to allow a service account to access Microsoft Graph API without user interaction. Which OAuth 2.0 flow should be used?

Answer: Client credentials flow

The client credentials flow allows a service or daemon application to authenticate using its own credentials (app ID and secret/certificate) without user context.

Which Azure AD directory role has the highest level of access and can manage all aspects of Azure AD?

Answer: Global Administrator

The Global Administrator role has full access to all administrative features in Azure AD and Microsoft 365 services connected to the tenant.