MS-900 Microsoft 365 Fundamentals Identity and Access Management 3

Question 1

What is the main difference between Azure AD B2B and Azure AD B2C?

Accepted Answer

B2B enables collaboration with external partners; B2C is for customer-facing apps

Answer

Azure AD B2B is designed for collaborating with external business partners, while B2C manages identities for customer-facing applications.

Question 2

Which feature in Azure AD allows an administrator to assign a user to an admin role only when needed, rather than permanently?

Accepted Answer

Just-In-Time (JIT) access via PIM

Answer

PIM's Just-In-Time access lets users activate privileged roles only when needed for a limited duration.

Question 3

An admin wants to review whether users still need the access they have been granted. Which Azure AD feature supports this?

Accepted Answer

Access Reviews

Answer

Azure AD Access Reviews allow administrators to periodically review and certify user access to groups, applications, and roles.

Question 4

What authentication method does FIDO2 security keys provide in Microsoft 365?

Accepted Answer

Passwordless authentication using a physical security key

Answer

FIDO2 security keys enable passwordless authentication using a physical hardware key that complies with the FIDO2 standard.

Question 5

Which Azure AD feature provides a report showing users who have not signed in recently or whose credentials may be at risk?

Accepted Answer

Azure AD Identity Protection risky users report

Answer

Azure AD Identity Protection's risky users report identifies accounts flagged due to suspicious activity or leaked credentials.

MS-900 Practice Test