MS-500 Identity & Access Management 2

Question 1

Which Azure AD license tier is required to use Azure AD Identity Protection?

Accepted Answer

Azure AD Premium P2

Answer

Azure AD Free

Answer

Azure AD Premium P1

Answer

Microsoft 365 Business Basic

Question 2

A user is locked out because of a high-risk sign-in flag. Which action remediates this in Azure AD Identity Protection?

Accepted Answer

Reset the user's password and require MFA re-registration

Answer

Delete and recreate the user account

Answer

Disable the user account temporarily

Answer

Assign a new license to the user

Question 3

What does the 'block legacy authentication' Conditional Access policy prevent?

Accepted Answer

Clients using older protocols like SMTP AUTH and Basic Auth that bypass MFA

Answer

Users from signing in outside business hours

Answer

Guest users from accessing SharePoint

Answer

Administrators from using privileged roles

Question 4

Which role in Azure AD has the least privilege needed to manage Conditional Access policies?

Accepted Answer

Conditional Access Administrator

Answer

Global Administrator

Answer

Security Administrator

Answer

User Administrator

Question 5

An organization uses hybrid identity. Which Azure AD Connect feature provides seamless SSO for domain-joined devices?

Accepted Answer

Azure AD Seamless SSO

Answer

Password Hash Synchronization (PHS)

Answer

Pass-through Authentication (PTA)

Answer

Federation with AD FS

Question 6

Which Azure AD feature allows external partners to sign in using their own organizational credentials?

Accepted Answer

Azure AD B2B Collaboration

Answer

Azure AD B2C

Answer

Azure AD Domain Services

Answer

Azure AD Application Proxy