MS-900 Microsoft 365 Fundamentals Identity and Access Management 2

Question 1

Which Azure AD feature allows users to reset their own passwords without contacting IT support?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Self-Service Password Reset (SSPR) lets users reset or unlock their passwords without IT helpdesk involvement.

Question 2

What does Azure AD Privileged Identity Management (PIM) primarily help organizations do?

Accepted Answer

Manage, control, and monitor access to privileged roles

Answer

PIM provides just-in-time privileged access and oversight of assignments to privileged roles in Azure AD.

Question 3

A company wants to ensure that only devices meeting security requirements can access corporate resources. Which Azure AD feature should they use?

Accepted Answer

Conditional Access with device compliance policies

Answer

Conditional Access combined with device compliance policies enforces that only compliant devices can access resources.

Question 4

What is the purpose of Azure AD Application Proxy?

Accepted Answer

To publish on-premises web applications and enable secure remote access

Answer

Azure AD Application Proxy enables secure remote access to on-premises web applications without a VPN.

Question 5

Which identity protection signal does Azure AD Identity Protection use to detect anonymous IP address usage?

Accepted Answer

Sign-in risk

Answer

Anonymous IP address usage is a sign-in risk detection, flagging sign-ins from IP addresses associated with anonymizing services.

MS-900 Practice Test