Describe Azure Identity, Access, and Security AZ-900 Practice Questions (Page 1)

Questions 1–5

1. 1application · medium

   A company uses Microsoft Entra ID and has multiple SaaS applications that support SAML-based SSO. Employees currently sign in to each application separately. The company wants to provide a single sign-in experience where employees authenticate once and then access all applications from a portal. What should they configure?

   • AIntegrate each application with Microsoft Entra ID and enable SSO, then use the My Apps portal.
   • BAssign the Global Administrator role to all employees.
   • CCreate a guest account for each employee in each SaaS application.
   • DUse Microsoft Entra Domain Services to join the SaaS applications.
   Reveal Solution Discussion Select an answer first
2. 2application · medium

   A company uses Microsoft Entra ID for employee identities. Employees currently have separate usernames and passwords for the company's CRM, HR portal, and expense system. The company wants employees to sign in once with their corporate credentials and then access all three applications without being prompted again. What should the company implement?

   • AAssign the Application Administrator role to all employees.
   • BIntegrate the applications with Microsoft Entra ID and configure single sign-on (SSO).
   • CCreate a separate guest user account in Microsoft Entra ID for each application.
   • DUse Microsoft Entra Domain Services to join the applications to a managed domain.
   Reveal Solution Discussion Select an answer first
4. 3foundation · easy

   How does Azure SSO simplify user access to multiple applications?

   • ABy using a single set of credentials to authenticate across all integrated applications
   • BBy eliminating the need for user identities in each application
   • CBy automatically creating user accounts in every application
   • DBy storing all user passwords in a central database that applications can access
   Reveal Solution Discussion Select an answer first
5. 4application · medium

   A company has a hybrid environment with resources in Azure and on-premises. The security team wants a single dashboard to view security recommendations, detect threats, and assess the compliance posture of both Azure and on-premises workloads. Which Azure service should they use?

   • AMicrosoft Defender for Cloud
   • BMicrosoft Entra ID
   • CMicrosoft Sentinel
   • DAzure Policy
   Reveal Solution Discussion Select an answer first
6. 5application · medium

   A company uses Microsoft Entra ID for its internal users. Employees currently sign in separately to Microsoft 365, a custom HR app, and a third-party SaaS tool. The security team wants to reduce password fatigue while ensuring that access from unmanaged devices is challenged with an additional verification step. What should you configure?

   • AEnable Microsoft Entra Domain Services and join all three apps to the managed domain so users sign in once with their domain credentials.
   • BConfigure Microsoft Entra External Identities so each app becomes an external identity provider and users authenticate with their existing app credentials.
   • CDeploy Microsoft Defender for Cloud to monitor sign-in logs and require MFA only when a user's risk score exceeds a threshold.
   • DSet up Microsoft Entra ID as the identity provider for all three apps and enable a Conditional Access policy that requires MFA for sign-ins from unmanaged devices.
   Reveal Solution Discussion Select an answer first