Describe Azure Identity, Access, and Security AZ-900 Practice Questions (Page 2)

Questions 6–10

1. 6foundation · easy

   Which feature is part of Azure External Identities?

   • AAzure Site Recovery
   • BAzure Policy
   • CAzure DNS hosting
   • DAzure AD B2B collaboration
   Reveal Solution Discussion Select an answer first
2. 7foundation · easy

   Which scenario is best suited for Microsoft Entra Domain Services?

   • AManaging access to Azure resources using role-based access control
   • BProtecting web applications from DDoS attacks
   • CLifting and shifting an on-premises application that requires domain-joined VMs and group policy in Azure
   • DProviding identity for a mobile application that only uses social logins
   Reveal Solution Discussion Select an answer first
4. 8foundation · easy

   What is the main benefit of Azure Single Sign-On (SSO)?

   • AUsers can use the same password for all their personal and work accounts
   • BUsers sign in once and gain access to multiple applications without re-entering credentials
   • CUsers no longer need to use multi-factor authentication
   • DUsers can access Azure resources without any authentication
   Reveal Solution Discussion Select an answer first
5. 9application · medium

   A company is designing a multi-layered security strategy for its Azure workloads. The security team wants to ensure that even if an attacker compromises a web application, they cannot easily access the backend database. The company also wants to monitor for misconfigurations across all Azure resources. What should the company implement?

   • AMicrosoft Entra ID with MFA for all users and a passwordless sign-in policy.
   • BNetwork security groups on the web tier, a separate subnet for the database with no direct internet access, and Microsoft Defender for Cloud for continuous assessment.
   • CAzure RBAC roles that grant the web app permission to read the database and a firewall rule allowing all Azure services.
   • DA single network security group applied to all subnets and a Conditional Access policy for database administrators.
   Reveal Solution Discussion Select an answer first
6. 10application · medium

   A company uses Microsoft Entra ID and has a policy that requires MFA for all users. Recently, some users have been locked out because they lost their phones. The helpdesk wants a way to allow users to authenticate without a phone, but only when they are on a trusted device. What should you configure?

   • ARequire MFA only for administrators and allow standard users to sign in without MFA.
   • BUse Microsoft Entra Domain Services to provide smart card authentication for all users.
   • CDisable MFA for all users and rely on password complexity.
   • DA Conditional Access policy that grants access from trusted devices without requiring MFA, while still requiring MFA for untrusted devices.
   Reveal Solution Discussion Select an answer first