Design Authentication and Authorization Solutions AZ-305 Practice Questions (Page 1)

Questions 1–5

1. 1foundation · easy

   Which Azure AD feature allows users to sign in once and then access multiple applications without being prompted again?

   • APrivileged Identity Management
   • BSelf-service password reset
   • CSingle sign-on (SSO)
   • DConditional Access
   Reveal Solution Discussion Select an answer first
2. 2foundation · easy

   A company wants to provide a self-service portal for customers to register and sign in to a consumer-facing application. Which Azure AD feature should be recommended?

   • AAzure AD B2B collaboration
   • BAzure AD Identity Protection
   • CAzure AD Privileged Identity Management
   • DAzure AD B2C
   Reveal Solution Discussion Select an answer first
4. 3application · medium

   A company is using Azure Key Vault to store secrets for multiple applications. They want to audit who is accessing secrets and when. They also want to ensure that secrets are automatically rotated every 90 days. What should you do?

   • AEnable Azure AD Privileged Identity Management for Key Vault to audit access, and use a logic app to rotate secrets.
   • BUse Azure AD sign-in logs to audit secret access, and manually rotate secrets every 90 days.
   • CEnable Key Vault logging and use Azure Monitor to analyze the logs. Use Key Vault's built-in rotation policy to set a 90-day rotation period.
   • DUse Azure Policy to audit Key Vault access, and set an expiration date on secrets.
   Reveal Solution Discussion Select an answer first
5. 4expert · hard

   A company has a large Azure environment with multiple subscriptions. The security team wants to implement a process where administrators can request elevated access to a subscription, but the access must be time-bound and require approval. The company also wants to audit all access requests and activations. What should you implement?

   • AAssign permanent Contributor roles to administrators and use Azure Monitor to audit their actions.
   • BUse Azure AD conditional access to require MFA for administrators and use Azure Activity Log for auditing.
   • CUse Azure AD PIM to make roles eligible and require approval for activation, with audit logs enabled.
   • DUse Azure AD access reviews to periodically review administrator access.
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company has a break-glass account that is assigned the Global Administrator role permanently. The security team wants to reduce the risk of this account being compromised. You need to recommend a solution that maintains the ability to break glass but reduces the standing access. What should you recommend?

   • ACreate a second break-glass account and distribute the credentials to two administrators.
   • BRemove the Global Administrator role from the break-glass account and assign it to a regular user account.
   • CKeep the break-glass account but require MFA and monitor its usage with Azure AD sign-in logs.
   • DMake the break-glass account eligible for the Global Administrator role in Azure AD PIM and require activation with approval.
   Reveal Solution Discussion Select an answer first