MS-102 Identity & Access Management 4

Question 1

A Conditional Access policy is set to 'Report-only' mode. What is the effect on users signing in?

Accepted Answer

Users can sign in normally, but results are logged for evaluation without enforcement

Answer

Report-only mode evaluates the policy and logs what would happen without actually enforcing access controls, enabling impact assessment.

Question 2

An administrator wants to ensure that only licensed users can be assigned the Teams Administrator role. Where is role assignability controlled in Azure AD?

Accepted Answer

Azure AD > Roles and administrators > Role settings

Answer

Role settings in Azure AD Roles and administrators control eligibility, activation requirements, and assignment rules for each role.

Question 3

What is the primary function of Azure AD Access Reviews in the context of privileged roles?

Accepted Answer

Periodically verify that users still need their current role assignments

Answer

Access Reviews allow administrators or designated reviewers to periodically confirm whether users still require their privileged role assignments.

Question 4

A company needs to integrate a third-party SaaS application with Azure AD for Single Sign-On using SAML. Which Azure AD component is used to configure this?

Accepted Answer

Enterprise applications

Answer

Enterprise applications in Azure AD is used to add and configure SAML-based SSO for third-party SaaS applications from the gallery or manually.

Question 5

Which Azure AD feature enables users to request access to applications and resources through a self-service portal?

Accepted Answer

Entitlement Management access packages

Answer

Entitlement Management access packages provide a self-service catalog where users can request access to bundles of resources through a portal.

(MS-102) Microsoft 365 Administrator Expert Practice Test

(MS-102) Microsoft 365 Administrator Expert Practice Test

MS-102 Identity & Access Management 4