Identity & Access Management Flashcards

What is the default behavior when a new guest user is invited through Azure AD B2B?

Answer: The guest receives a one-time passcode or uses their existing IdP to authenticate

Azure AD B2B guests authenticate via their home identity provider or receive a one-time passcode if they have no supported IdP.

Which report in Azure AD shows all sign-ins that were flagged as risky?

Answer: Risky Sign-ins Report

The Risky Sign-ins Report in Azure AD Identity Protection lists all sign-in events that were assigned a risk score by the service.

An admin wants to require re-authentication every 8 hours for a sensitive application. Which Conditional Access control achieves this?

Answer: Sign-in frequency session control

The sign-in frequency session control in Conditional Access sets how often users must re-authenticate before accessing a resource.

Which Azure AD feature provides a self-service portal for users to reset their own passwords without IT intervention?

Answer: Self-Service Password Reset (SSPR)

SSPR lets users reset their passwords using registered authentication methods such as phone, email, or authenticator app without IT help.

Azure AD Password Protection prevents users from using which types of passwords?

Answer: Passwords on a customizable banned password list including common weak passwords

Azure AD Password Protection uses a global and custom banned password list to prevent users from setting commonly used or organization-specific weak passwords.

Which hybrid identity method sends the user's password hash to Azure AD, enabling cloud-based authentication?

Answer: Password Hash Synchronization

Password Hash Synchronization synchronizes a hash of the on-premises password hash to Azure AD, allowing authentication to be performed in the cloud.