Conditional Access Policies GCAD Practice Questions (Page 6)

Questions 26–30

1. 26foundation · easy

   What is the primary purpose of a Conditional Access policy in Microsoft Entra ID?

   • ATo provide a single sign-on experience across all cloud applications
   • BTo enforce access decisions by evaluating signals such as user, device, and location against configured conditions
   • CTo encrypt all data stored in Microsoft 365 applications
   • DTo automatically reset a user's password when they fail to authenticate multiple times
   Reveal Solution Discussion Select an answer first
2. 27foundation · easy

   When configuring assignments in a Conditional Access policy, which of the following can be targeted?

   • AOnly individual users, not groups
   • BOnly users and groups, not workload identities
   • COnly cloud applications, not on-premises applications
   • DUsers, groups, and workload identities
   Reveal Solution Discussion Select an answer first
4. 28foundation · easy

   Which of the following is an example of a 'session control' in a Conditional Access policy?

   • ABlocking access
   • BRequiring multi-factor authentication
   • CRequiring a compliant device
   • DEnforcing sign-in frequency
   Reveal Solution Discussion Select an answer first
5. 29foundation · easy

   Which statement best describes the role of Conditional Access policies in an identity and access management strategy?

   • AThey replace the need for multi-factor authentication (MFA) by using device compliance checks
   • BThey are used only for external guest users and not for internal employees
   • CThey automatically block all access from unmanaged devices
   • DThey provide a way to enforce access decisions based on conditions, complementing other security controls
   Reveal Solution Discussion Select an answer first
6. 30application · medium

   A company wants to create a conditional access policy that requires MFA for users accessing a specific application from outside the network. Which components must be configured in the policy?

   • AAssignments (apps), conditions (location), and access controls (allow).
   • BAssignments (users), conditions (device state), and access controls (block).
   • CAssignments (groups), conditions (risk), and access controls (session).
   • DAssignments (users and apps), conditions (location), and access controls (grant MFA).
   Reveal Solution Discussion Select an answer first