What is a core principle of the Zero Trust security model?

Use the same password for all systems to simplify access

Trust all users inside the corporate network by default

Assume breach and verify explicitly for every access request

Rely solely on perimeter firewalls to protect resources

What is the primary purpose of Azure Multifactor Authentication (MFA)?

To automatically block all access from unknown IP addresses

To require users to provide two or more forms of verification before granting access

To replace passwords with biometric verification only

To encrypt all data stored in Azure

A company uses Microsoft Entra ID. They want to allow external partners to access a specific SharePoint Online site using their own corporate credentials, without creating separate accounts for each partner in the company's directory. What should they use?

Microsoft Entra Domain Services

Microsoft Entra B2B collaboration

Which of the following is a passwordless authentication method supported by Microsoft Entra ID?

Using a static security question

A company uses Microsoft Defender for Cloud to monitor their Azure subscription. They want to receive alerts when a VM has a high-severity vulnerability. They also want to automatically apply a recommendation to remediate the vulnerability. Which two capabilities of Defender for Cloud should they use?

Microsoft Sentinel and Azure Monitor.

Security alerts and automated remediation actions.

Azure Security Center and Azure Firewall.

Microsoft Certified:Azure Fundamentals

Domain 2Objective 4

Describe Azure Identity, Access, and Security AZ-900 Practice Questions (Page 8)

Part of the Describe Azure architecture and services domain, which accounts for 35–40% of the AZ-900 exam. Microsoft does not publish an official question count, but from its 45-minute exam (~20–30 total, ~7–12 in this domain), expect 2–3 from this objective — we provide 45 practice questions to prepare you well beyond it. (estimate)

Start Intelligent Quiz

45questions here

9free pages

11concepts

35–40%of the exam

Questions 36–40

36foundation · easy
What is a core principle of the Zero Trust security model?
Select an answer first
37foundation · easy
What is the primary purpose of Azure Multifactor Authentication (MFA)?
Select an answer first
38application · medium
A company uses Microsoft Entra ID. They want to allow external partners to access a specific SharePoint Online site using their own corporate credentials, without creating separate accounts for each partner in the company's directory. What should they use?
Select an answer first
39foundation · easy
Which of the following is a passwordless authentication method supported by Microsoft Entra ID?
Select an answer first
40expert · hard
A company uses Microsoft Defender for Cloud to monitor their Azure subscription. They want to receive alerts when a VM has a high-severity vulnerability. They also want to automatically apply a recommendation to remediate the vulnerability. Which two capabilities of Defender for Cloud should they use?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to AZ-900

Examers app · Pro

You’ve practiced. Now get ready to pass.

Free practice is the warm‑up. The Examers app turns it into a pass — adaptive quizzing, a visual book, and an honest readiness score for AZ-900.

Exam Coach that reads what you have really answered and picks one thing for tonight
Intelligent Quiz that adapts to your weak areas
Split‑screen Visual Book — learn each concept as you practice
Timed sets & full mock exams that mirror the real thing
Readiness score from real evidence — know when you’re ready

Get exam‑ready See what’s inside

Free practice stays free — always.

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “AZ-900” is a trademark of its owner, used for identification only.