Manage Microsoft Entra Application Access and Managed Identities AZ-500 Practice Questions (Page 2)

Questions 6–10

1. 6application · medium

   An organization is integrating a third-party SaaS application with Microsoft Entra ID. The app requires permission to read user profiles and send email on behalf of users. The security team wants to minimize user prompts while ensuring that only approved administrators can grant these permissions. What should you configure?

   • AAssign the application to users and rely on the default user consent behavior.
   • BPre-consent the application by granting admin consent for the required permissions in the Enterprise Application.
   • CEnable the user consent setting to allow all users to consent to the required permissions.
   • DConfigure the application to use the client credentials flow so it authenticates as itself.
   Reveal Solution Discussion Select an answer first
2. 7application · medium

   A company has a multi-tier application that consists of a web app and an API. The web app needs to authenticate to the API without user interaction. The security team wants to avoid storing any secrets in the web app's configuration. What should you do?

   • AEnable a system-assigned managed identity on the web app and grant it access to the API's app role.
   • BCreate a service principal for the web app and store its client secret in the web app's application settings.
   • CConfigure the API to accept anonymous requests from the web app's IP address.
   • DUse the web app's client ID and a certificate stored in the web app's file system.
   Reveal Solution Discussion Select an answer first
4. 8application · medium

   A company uses Microsoft Entra ID to manage access to a custom line-of-business application. The application is registered in Entra ID and requires the User.Read permission. The security team wants to ensure that only users in the Sales department can access the application, and they want to prevent users from self-servicing access. What should you configure?

   • ACreate a conditional access policy that blocks all users except the Sales group.
   • BDisable the application's 'User assignment required' setting and add the Sales group as an owner.
   • CSet the application to be visible to all users and rely on the User.Read permission to filter access.
   • DSet the application's assignment requirement to 'Yes' and assign only the Sales group to the application.
   Reveal Solution Discussion Select an answer first
5. 9foundation · easy

   What is the primary purpose of the 'Enterprise applications' blade in the Microsoft Entra admin center?

   • ATo configure password hash synchronization for on-premises accounts
   • BTo manage user and group assignments for applications that are integrated with Microsoft Entra ID
   • CTo create new custom applications from scratch
   • DTo manage the lifecycle of Azure resources like virtual machines
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company has an enterprise application that uses OAuth 2.0 to access Microsoft Graph. The application has been granted the User.Read.All permission via admin consent. The security team wants to audit which users have granted consent to this application. What should you review?

   • AThe 'Consent and permissions' tab in the enterprise application's settings.
   • BThe 'Properties' tab in the app registration.
   • CThe 'Users and groups' tab in the enterprise application's settings.
   • DThe 'Certificates and secrets' tab in the app registration.
   Reveal Solution Discussion Select an answer first