MS-900 Microsoft 365 Fundamentals Identity and Access Management 2 — Questions and Answers
Question 1: Which Azure AD feature allows users to reset their own passwords without contacting IT support?
- Self-Service Password Reset (SSPR) (Correct answer)
- Password Hash Sync
- Azure AD Connect
- Privileged Identity Management
Correct answer: Self-Service Password Reset (SSPR)
Self-Service Password Reset (SSPR) lets users reset or unlock their passwords without IT helpdesk involvement.
Question 2: What does Azure AD Privileged Identity Management (PIM) primarily help organizations do?
- Sync on-premises identities to the cloud
- Manage, control, and monitor access to privileged roles (Correct answer)
- Enable single sign-on across applications
- Detect risky sign-in behaviors
Correct answer: Manage, control, and monitor access to privileged roles
PIM provides just-in-time privileged access and oversight of assignments to privileged roles in Azure AD.
Question 3: A company wants to ensure that only devices meeting security requirements can access corporate resources. Which Azure AD feature should they use?
- Azure AD B2C
- Conditional Access with device compliance policies (Correct answer)
- Password Hash Synchronization
- Azure AD B2B
Correct answer: Conditional Access with device compliance policies
Conditional Access combined with device compliance policies enforces that only compliant devices can access resources.
Question 4: What is the purpose of Azure AD Application Proxy?
- To create guest user accounts from external organizations
- To publish on-premises web applications and enable secure remote access (Correct answer)
- To synchronize passwords between on-premises AD and Azure AD
- To monitor user sign-in risk levels
Correct answer: To publish on-premises web applications and enable secure remote access
Azure AD Application Proxy enables secure remote access to on-premises web applications without a VPN.
Question 5: Which identity protection signal does Azure AD Identity Protection use to detect anonymous IP address usage?
- User risk
- Sign-in risk (Correct answer)
- Compliance risk
- Privilege risk
Correct answer: Sign-in risk
Anonymous IP address usage is a sign-in risk detection, flagging sign-ins from IP addresses associated with anonymizing services.
Question 6: In Microsoft 365, what does the term 'hybrid identity' refer to?
- Using both MFA and single-factor authentication together
- A setup where identities exist in both on-premises Active Directory and Azure AD (Correct answer)
- Combining Azure AD B2B and B2C in one tenant
- Using multiple MFA methods simultaneously
Correct answer: A setup where identities exist in both on-premises Active Directory and Azure AD
Hybrid identity refers to a configuration where user identities are maintained in on-premises AD and synchronized to Azure AD.
Question 7: Which Microsoft 365 license tier is required to use Azure AD Privileged Identity Management (PIM)?
- Microsoft 365 Business Basic
- Azure AD Free
- Azure AD Premium P2 (Correct answer)
- Azure AD Premium P1
Correct answer: Azure AD Premium P2
Azure AD Privileged Identity Management requires an Azure AD Premium P2 license.
MS-900 Microsoft 365 Fundamentals Identity and Access Management 2
Which Azure AD feature allows users to reset their own passwords without contacting IT support?