Conditional Access Policies GCAD Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   What is the principle of least privilege in the context of Conditional Access policies?

   • AGranting administrators more access than regular users
   • BGranting users the minimum level of access necessary to perform their job
   • CGranting access based on the user's role, regardless of need
   • DGranting all users the same level of access for simplicity
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   Which design practice is recommended when creating Conditional Access policies to avoid locking out administrators?

   • AApplying the policy only to administrators
   • BCreating a break-glass account that is excluded from Conditional Access policies
   • CUsing the same policy for all users without exceptions
   • DExcluding all administrators from the policies
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company wants to enforce conditional access policies for all cloud applications, but they are concerned about the impact on users who are already authenticated. They want to ensure that policies are evaluated at sign-in and also when a user's risk level changes during a session. Which feature should they use?

   • ASession controls in conditional access
   • BAzure AD Privileged Identity Management
   • CContinuous access evaluation (CAE)
   • DIdentity Protection policies
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company wants to allow users to access a cloud app only if they are using a compliant device. Which access control should they configure?

   • ARequire device to be marked as compliant
   • BRequire approved client app
   • CRequire MFA
   • DBlock access
   Reveal Solution Discussion Select an answer first
6. 5expert · hard

   An organization has a conditional access policy that requires MFA for all users when accessing a sensitive app. They also have a policy that blocks access from untrusted locations. A user signs in from an untrusted location and is prompted for MFA, but after completing MFA, they are still blocked. What is the most likely reason?

   • AThe user did not complete MFA correctly.
   • BThe block policy is also being enforced, and the user's location is untrusted.
   • CThe MFA policy is configured to block access instead of require MFA.
   • DThe user is not assigned to the block policy.
   Reveal Solution Discussion Select an answer first