SC-900 Microsoft Identity & Access Management 4

Question 1

What is Azure AD Entitlement Management used for?

Accepted Answer

Automating identity governance by managing access packages for users to request

Answer

Entitlement Management lets organizations define access packages (bundles of resources) that users can request and managers can approve.

Question 2

Which statement about Azure AD B2B collaboration is correct?

Accepted Answer

B2B allows external partners to use their own credentials to access your organization's resources

Answer

Azure AD B2B lets external users authenticate with their own identity provider while accessing your organization's apps and data.

Question 3

What is the role of a 'Global Administrator' in Azure AD?

Accepted Answer

Has full access to all Azure AD administrative features and can manage all aspects of the tenant

Answer

Global Administrators have the highest-privilege role in Azure AD with full control over all tenant administrative functions.

Question 4

How does Azure AD Connect help organizations with hybrid identity?

Accepted Answer

It synchronizes on-premises AD user accounts and groups to Azure AD

Answer

Azure AD Connect syncs on-premises AD objects (users, groups, passwords) to Azure AD, enabling hybrid identity scenarios.

Question 5

What is 'Password Hash Synchronization' (PHS) in Azure AD Connect?

Accepted Answer

Syncing a hashed representation of on-premises passwords to Azure AD for cloud authentication

Answer

PHS syncs a hash of the on-premises password hash to Azure AD, enabling users to authenticate to cloud services with their on-premises credentials.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test