A company has a custom application that authenticates users against Azure AD. The application needs to access the Microsoft Graph API to read user profiles. The application is a background service that runs without user interaction. You need to authenticate the application to Microsoft Graph. What should you use?

OAuth 2.0 client credentials grant flow with an application secret.

OAuth 2.0 authorization code grant flow with a user account.

SAML 2.0 with an application certificate.

OpenID Connect with the implicit flow.

A company wants to implement just-in-time (JIT) access for Azure AD roles and Azure resource roles. They also need to require approval for activating the Global Administrator role. What should you configure?

Enable Azure AD Privileged Identity Management (PIM) and configure role settings to require approval for Global Administrator activation.

Assign the Global Administrator role permanently to a break-glass account and use Azure AD Identity Protection for monitoring.

Use Conditional Access to require approval for Global Administrator sign-ins.

Use Azure AD access reviews to approve role assignments periodically.

A company has a custom application that authenticates users against Azure AD. The application is a single-page application (SPA) that runs in the browser. The application needs to call Microsoft Graph API on behalf of the user. The company wants to minimize the risk of token leakage. What should you use?

OpenID Connect with the hybrid flow.

OAuth 2.0 authorization code flow with PKCE.

OAuth 2.0 client credentials flow.

Azure Solutions Architect Expert

Domain 1Objective 2

Design Authentication and Authorization Solutions AZ-305 Practice Questions (Page 4)

Part of the Design identity, governance, and monitoring solutions domain, which makes up ~30% of our current practice bank. Microsoft does not publish an official question count, but from its 120-minute exam (~50–80 total, ~15–24 in this domain), expect 5–8 from this objective — we provide 31 practice questions to prepare you well beyond it. (estimate)

31questions here

7free pages

8concepts

Questions 16–20

16application · medium
A company has a custom application that authenticates users against Azure AD. The application needs to access the Microsoft Graph API to read user profiles. The application is a background service that runs without user interaction. You need to authenticate the application to Microsoft Graph. What should you use?
Select an answer first
17application · medium
A company wants to implement just-in-time (JIT) access for Azure AD roles and Azure resource roles. They also need to require approval for activating the Global Administrator role. What should you configure?
Select an answer first
18foundation · easy
A company needs to provide access to Azure resources for external partners who have their own identity provider. Which Azure AD feature should be used?
Select an answer first
19foundation · easy
Which Azure service synchronizes on-premises Active Directory identities to Azure AD to enable a hybrid identity solution?
Select an answer first
20expert · hard
A company has a custom application that authenticates users against Azure AD. The application is a single-page application (SPA) that runs in the browser. The application needs to call Microsoft Graph API on behalf of the user. The company wants to minimize the risk of token leakage. What should you use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-305

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-305” is a trademark of its owner, used for identification only.

Design Authentication and Authorization Solutions AZ-305 Practice Questions (Page 4)

Questions 16–20

A company wants to implement just-in-time (JIT) access for Azure AD roles and Azure resource roles. They also need to require approval for activating the Global Administrator role. What should you configure?

A company needs to provide access to Azure resources for external partners who have their own identity provider. Which Azure AD feature should be used?

Which Azure service synchronizes on-premises Active Directory identities to Azure AD to enable a hybrid identity solution?

Keep studying — Design identity, governance, and monitoring solutions