Microsoft 365 Fundamentals Identity and Access Management Flashcards

A company is planning to implement a hybrid identity solution to synchronize its on-premises Active Directory with Microsoft Entra ID. Which tool is specifically designed for this purpose?

Answer: Microsoft Entra Connect

Microsoft Entra Connect is the Microsoft tool designed to meet and accomplish hybrid identity goals. It provides features like password hash sync, pass-through authentication, and federation integration, which are essential for synchronizing on-premises directories with Microsoft Entra ID.

Which of the following BEST describes the principle of 'authentication' in the context of Identity and Access Management?

Answer: Verifying the identity of a user or device to ensure they are who they claim to be.

Authentication is the process of challenging a user or device for credentials and verifying that they are who they say they are. This is distinct from authorization, which happens after successful authentication and determines what resources the verified user can access.

A financial services company wants to enhance its security by requiring employees to provide a second form of verification, such as a code from a mobile app, when accessing sensitive applications. Which Microsoft 365 security feature should they implement?

Answer: Multi-Factor Authentication (MFA)

Multi-Factor Authentication (MFA) adds a layer of protection to the sign-in process. When accessing accounts or apps, users provide additional identity verification, such as scanning a fingerprint or entering a code received on their phone.

An organization wants to ensure that users can only access Microsoft 365 services from company-managed and compliant devices. Which Microsoft Entra feature allows an administrator to create rules that evaluate specific conditions before granting access?

Answer: Conditional Access

Conditional Access policies are if-then statements that combine signals, such as user location or device compliance, to make decisions and enforce organizational policies. This allows an administrator to block access or require additional verification if a user is trying to connect from a non-compliant device.

What is the primary identity and access management service that underpins all Microsoft 365 services?

Answer: Microsoft Entra ID

Microsoft Entra ID (formerly known as Azure Active Directory) is Microsoft's cloud-based identity and access management service. It is the foundational identity provider for Microsoft 365, allowing users to sign in and access various services like Exchange Online, SharePoint Online, and Teams.

A user who exists only in Microsoft Entra ID and is not synchronized from an on-premises directory is referred to as what type of identity?

Answer: Cloud-only identity

A cloud-only identity is a user account that is created and exists exclusively in Microsoft Entra ID. This is in contrast to synchronized or federated identities, which originate in an on-premises Active Directory and are synced to the cloud.