MS-500 Identity & Access Management

Question 1

Which Azure AD feature enforces multi-factor authentication based on user risk and sign-in risk signals?

Accepted Answer

Identity Protection

Answer

Conditional Access

Answer

Privileged Identity Management

Answer

Access Reviews

Question 2

A global administrator wants to limit the time a user holds an elevated role. Which Azure AD feature should be used?

Accepted Answer

Privileged Identity Management (PIM)

Answer

Conditional Access policies

Answer

Identity Protection

Answer

Azure AD roles

Question 3

Which protocol does Azure AD use by default for modern authentication in Microsoft 365?

Accepted Answer

OAuth 2.0 / OpenID Connect

Answer

SAML 2.0

Answer

Kerberos

Answer

NTLM

Question 4

An organization needs to ensure users can only access Microsoft 365 from compliant devices. Which feature enforces this?

Accepted Answer

Conditional Access with device compliance policy

Answer

Azure AD Identity Protection

Answer

Microsoft Defender for Identity

Answer

Azure AD Access Reviews

Question 5

What is the purpose of Azure AD Access Reviews?

Accepted Answer

Periodically validate that users still need their group memberships and role assignments

Answer

Monitor sign-in logs for suspicious activity

Answer

Block risky sign-ins in real time

Answer

Manage password policies for cloud users

Question 6

Which Azure AD feature synchronizes on-premises Active Directory identities to Azure AD?

Accepted Answer

Azure AD Connect

Answer

Azure AD B2B

Answer

Azure AD Domain Services

Answer

Azure AD Proxy