Azure AD Identity Management Flashcards

Which Azure AD feature allows you to enforce multi-factor authentication based on user location, device compliance, and application sensitivity?

Answer: Conditional Access

Conditional Access policies evaluate signals like location, device state, and app sensitivity to grant or block access with MFA requirements.

An administrator needs to provide just-in-time privileged access to Azure resources with approval workflows. Which Azure AD feature should they use?

Answer: Privileged Identity Management (PIM)

PIM provides just-in-time privileged access with approval workflows, time-limited assignments, and audit trails for Azure AD and Azure resources.

What is the maximum number of objects that can be synchronized to a single Azure AD tenant using Azure AD Connect?

Answer: 500,000

A single Azure AD tenant supports up to 500,000 objects when synchronized using Azure AD Connect from an on-premises directory.

Which Azure AD Identity Protection risk detection identifies sign-ins from anonymous IP addresses such as Tor browsers?

Answer: Anonymous IP address

The Anonymous IP address risk detection flags sign-ins originating from anonymous proxies or Tor network exit nodes.

A company wants to allow external partners to access specific SharePoint sites without creating guest accounts in Azure AD. Which feature enables this?

Answer: Entitlement Management with connected organizations

Entitlement Management with connected organizations allows external partners to request access to resources using their own organizational credentials.

Which Azure AD feature periodically reviews and certifies user access to applications and groups to ensure access is still appropriate?

Answer: Access Reviews

Access Reviews enable periodic certification of user memberships and application assignments to validate that access remains appropriate.