Identity & Access Management Flashcards

Which Azure AD feature enforces multi-factor authentication based on user risk and sign-in risk signals?

Answer: Identity Protection

Azure AD Identity Protection uses risk-based signals to automatically enforce MFA or block sign-ins when suspicious activity is detected.

A global administrator wants to limit the time a user holds an elevated role. Which Azure AD feature should be used?

Answer: Privileged Identity Management (PIM)

PIM provides just-in-time privileged access, allowing administrators to activate roles only when needed for a limited time.

Which protocol does Azure AD use by default for modern authentication in Microsoft 365?

Answer: OAuth 2.0 / OpenID Connect

Azure AD uses OAuth 2.0 for authorization and OpenID Connect for authentication as its primary modern authentication protocols.

An organization needs to ensure users can only access Microsoft 365 from compliant devices. Which feature enforces this?

Answer: Conditional Access with device compliance policy

Conditional Access policies can require that devices meet compliance requirements set in Intune before granting access to Microsoft 365 services.

What is the purpose of Azure AD Access Reviews?

Answer: Periodically validate that users still need their group memberships and role assignments

Azure AD Access Reviews allow administrators or resource owners to periodically review and certify whether users still need access to resources.

Which Azure AD feature synchronizes on-premises Active Directory identities to Azure AD?

Answer: Azure AD Connect

Azure AD Connect is the tool used to synchronize on-premises Active Directory users, groups, and attributes to Azure AD.