AZ-304 Azure Identity and Access Management Design

Question 1

Which Azure AD feature allows you to enforce multi-factor authentication based on user risk and sign-in risk signals?

Accepted Answer

Identity Protection

Answer

Azure AD Identity Protection uses risk-based policies to automatically enforce MFA or block access when suspicious sign-in signals are detected.

Question 2

A company needs to provide external partners with access to Azure resources without managing their identities in Azure AD. Which solution should you recommend?

Accepted Answer

Azure AD B2B

Answer

Azure AD B2B allows external users to sign in with their own organizational identities, eliminating the need to manage their credentials in your tenant.

Question 3

Which role-based access control scope is the HIGHEST level in the Azure RBAC hierarchy?

Accepted Answer

Management Group

Answer

Management Groups sit at the top of the Azure RBAC hierarchy, allowing policy and access assignments that cascade down to subscriptions, resource groups, and resources.

Question 4

You need to grant an application access to Azure Key Vault secrets without storing credentials in code. What should you use?

Accepted Answer

Managed Identity

Answer

Managed Identities provide Azure services with an automatically managed identity in Azure AD, eliminating the need to store credentials in application code.

Question 5

What is the purpose of Privileged Identity Management (PIM) in Azure AD?

Accepted Answer

To provide just-in-time privileged access to Azure resources

Answer

PIM enables just-in-time activation of privileged roles, reducing standing access and requiring justification and approval for elevated permissions.

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 - Microsoft Azure Architect Design Practice Test

AZ-304 Azure Identity and Access Management Design