MS-500 Identity & Access Management 2

Question 1

Which Azure AD license tier is required to use Azure AD Identity Protection?

Accepted Answer

Azure AD Premium P2

Answer

Azure AD Identity Protection features, including risk-based Conditional Access and risky user reports, require Azure AD Premium P2 licensing.

Question 2

A user is locked out because of a high-risk sign-in flag. Which action remediates this in Azure AD Identity Protection?

Accepted Answer

Reset the user's password and require MFA re-registration

Answer

Resetting a risky user's password and requiring MFA re-registration dismisses the user risk and restores their access.

Question 3

What does the 'block legacy authentication' Conditional Access policy prevent?

Accepted Answer

Clients using older protocols like SMTP AUTH and Basic Auth that bypass MFA

Answer

Blocking legacy authentication prevents older protocols (IMAP, POP, Basic Auth) from being used, as they cannot enforce MFA.

Question 4

Which role in Azure AD has the least privilege needed to manage Conditional Access policies?

Accepted Answer

Conditional Access Administrator

Answer

The Conditional Access Administrator role is specifically scoped to create and manage Conditional Access policies with minimal additional permissions.

Question 5

An organization uses hybrid identity. Which Azure AD Connect feature provides seamless SSO for domain-joined devices?

Accepted Answer

Azure AD Seamless SSO

Answer

Azure AD Seamless SSO automatically signs users in on corporate domain-joined devices without requiring them to enter passwords.

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 - Microsoft 365 Security Administration Practice Test

MS-500 Identity & Access Management 2