Identity & Access Management Flashcards

Which Azure AD license tier is required to use Azure AD Identity Protection?

Answer: Azure AD Premium P2

Azure AD Identity Protection features, including risk-based Conditional Access and risky user reports, require Azure AD Premium P2 licensing.

A user is locked out because of a high-risk sign-in flag. Which action remediates this in Azure AD Identity Protection?

Answer: Reset the user's password and require MFA re-registration

Resetting a risky user's password and requiring MFA re-registration dismisses the user risk and restores their access.

What does the 'block legacy authentication' Conditional Access policy prevent?

Answer: Clients using older protocols like SMTP AUTH and Basic Auth that bypass MFA

Blocking legacy authentication prevents older protocols (IMAP, POP, Basic Auth) from being used, as they cannot enforce MFA.

Which role in Azure AD has the least privilege needed to manage Conditional Access policies?

Answer: Conditional Access Administrator

The Conditional Access Administrator role is specifically scoped to create and manage Conditional Access policies with minimal additional permissions.

An organization uses hybrid identity. Which Azure AD Connect feature provides seamless SSO for domain-joined devices?

Answer: Azure AD Seamless SSO

Azure AD Seamless SSO automatically signs users in on corporate domain-joined devices without requiring them to enter passwords.

Which Azure AD feature allows external partners to sign in using their own organizational credentials?

Answer: Azure AD B2B Collaboration

Azure AD B2B Collaboration allows external users to authenticate with their home organization's identity provider to access your tenant's resources.