A company wants to ensure that administrators who are assigned the Azure AD Global Administrator role must activate the role only when needed, and the activation must be time-limited. They also want to require a business justification for each activation. What should you configure?

Assign the Global Administrator role permanently and use Azure AD access reviews to monitor usage.

Use Azure AD Identity Protection to require justification for risky sign-ins.

Configure Azure AD PIM to make the Global Administrator role eligible and require justification for activation.

Use Conditional Access to require a business justification for Global Administrator sign-ins.

A company has an on-premises application that uses Active Directory for authentication. The company is moving the application to an Azure VM and wants to use the same on-premises credentials. The company does not want to manage domain controllers in Azure. What should you recommend?

Implement Azure AD Pass-through Authentication for the application.

Use Azure AD Application Proxy to publish the application.

Use Azure AD Domain Services and join the Azure VM to the managed domain.

Set up a site-to-site VPN and join the Azure VM to the on-premises domain.

Which Azure service is used to grant users specific permissions to Azure resources by assigning roles?

Azure Active Directory (Azure AD)

Azure Role-Based Access Control (RBAC)

Azure Solutions Architect Expert

Domain 1Objective 2

Design Authentication and Authorization Solutions AZ-305 Practice Questions (Page 3)

Part of the Design identity, governance, and monitoring solutions domain, which makes up ~30% of our current practice bank. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 5–8 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Questions 11–15

11application · medium
A company wants to ensure that administrators who are assigned the Azure AD Global Administrator role must activate the role only when needed, and the activation must be time-limited. They also want to require a business justification for each activation. What should you configure?
Select an answer first
12application · medium
A company has an on-premises application that uses Active Directory for authentication. The company is moving the application to an Azure VM and wants to use the same on-premises credentials. The company does not want to manage domain controllers in Azure. What should you recommend?
Select an answer first
13application · medium
A company has an on-premises Active Directory and wants to allow Azure virtual machines to authenticate users against the on-premises domain for accessing file shares. They also want to use Azure AD for SSO to Microsoft 365. They plan to use Azure AD Connect. What additional service should they deploy to meet the VM authentication requirement?
Select an answer first
14foundation · easy
A company wants to allow users to access on-premises applications from the internet without exposing the applications directly. Which Azure service should be used?
Select an answer first
15foundation · easy
Which Azure service is used to grant users specific permissions to Azure resources by assigning roles?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-305

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-305” is a trademark of its owner, used for identification only.

Design Authentication and Authorization Solutions AZ-305 Practice Questions (Page 3)

Questions 11–15

A company wants to ensure that administrators who are assigned the Azure AD Global Administrator role must activate the role only when needed, and the activation must be time-limited. They also want to require a business justification for each activation. What should you configure?

A company has an on-premises application that uses Active Directory for authentication. The company is moving the application to an Azure VM and wants to use the same on-premises credentials. The company does not want to manage domain controllers in Azure. What should you recommend?

A company wants to allow users to access on-premises applications from the internet without exposing the applications directly. Which Azure service should be used?

Which Azure service is used to grant users specific permissions to Azure resources by assigning roles?

Keep studying — Design identity, governance, and monitoring solutions