Describe Azure Identity, Access, and Security AZ-900 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   What does Microsoft Entra Domain Services provide to Azure customers?

   • AA tool for managing user passwords across all Azure services
   • BA fully self-managed Active Directory environment where customers control all domain controllers
   • CA service that only provides DNS resolution for Azure resources
   • DManaged domain services such as domain join, group policy, and LDAP for Azure virtual machines
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   What is the primary role of Microsoft Entra ID in an Azure environment?

   • ATo store virtual machine images and manage their deployment across Azure regions
   • BTo provide a firewall service that filters network traffic to and from Azure resources
   • CTo monitor and log all activity within an Azure subscription for compliance purposes
   • DTo provide a cloud-based identity and access management service that authenticates users and controls access to applications and resources
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A company is adopting a Zero Trust security model. The security team wants to ensure that every access request is verified, regardless of whether the user is on the corporate network or at home. They also want to minimize the risk of compromised credentials. What should the company implement?

   • AUse Microsoft Entra Domain Services to ensure all devices are domain-joined and then allow access.
   • BTrust the corporate network and only require MFA for users accessing from outside the office.
   • CDeploy Microsoft Defender for Cloud to monitor network traffic and block all external connections.
   • DRequire MFA for all users and use Conditional Access policies to evaluate risk and device compliance for every sign-in.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which of the following is an example of a condition that can be evaluated by Conditional Access?

   • AThe user's department name
   • BThe user's sign-in risk level
   • CThe user's favorite color
   • DThe user's email signature
   Reveal Solution Discussion Select an answer first
6. 20foundation · easy

   What is the primary purpose of Microsoft Defender for Cloud?

   • ATo provide a content delivery network for web applications
   • BTo monitor the cost of Azure resources
   • CTo manage virtual machine backups and restore operations
   • DTo provide security management and threat protection across Azure, on-premises, and other clouds
   Reveal Solution Discussion Select an answer first