Design Solutions for Identity and Access Management SC-100 Practice Questions (Page 4)

Questions 16–20

1. 16foundation · easy

   Which Microsoft Entra feature calculates a risk score for each user sign-in based on signals such as anonymous IP addresses, atypical travel, or malware-linked IP addresses?

   • AConditional Access
   • BMicrosoft Entra Connect Sync
   • CMicrosoft Entra Identity Protection
   • DContinuous access evaluation
   Reveal Solution Discussion Select an answer first
2. 17foundation · easy

   Which Microsoft Entra feature allows users to access applications hosted in other cloud providers, such as AWS or Google Cloud, using their Microsoft Entra credentials?

   • AMicrosoft Entra ID federation with SAML or OIDC
   • BAzure AD Connect
   • CMicrosoft Entra Application Proxy
   • DMicrosoft Entra Domain Services
   Reveal Solution Discussion Select an answer first
4. 18foundation · easy

   What is the primary purpose of deploying Microsoft Entra Connect Sync in a hybrid identity environment?

   • ATo provide single sign-on to SaaS applications
   • BTo synchronize user, group, and other directory objects from on-premises Active Directory to Microsoft Entra ID
   • CTo manage conditional access policies for on-premises resources
   • DTo create a VPN connection between on-premises and Azure
   Reveal Solution Discussion Select an answer first
5. 19application · medium

   Your company has a CI/CD pipeline that deploys to Azure. You need to design a secrets management solution so that pipeline secrets are not stored in the code repository. The solution must allow the pipeline to access secrets without human intervention and must support rotation. What should you implement?

   • AUse Azure Key Vault and a managed identity for the pipeline to access secrets
   • BEncrypt secrets with a certificate and store them in the repository
   • CUse a service principal with a client secret in the pipeline
   • DStore secrets in Azure DevOps variable groups
   Reveal Solution Discussion Select an answer first
6. 20expert · hard

   A company uses Azure Key Vault to store secrets for multiple applications. They want to ensure that applications can access secrets without storing credentials in code, but they also need to rotate secrets automatically and audit access. They are considering using managed identities and Key Vault references. What should you recommend?

   • AStore secrets in App Service application settings and use Key Vault for backup.
   • BUse managed identities for each application and grant them access to Key Vault, then use Key Vault references in App Service settings.
   • CStore secrets in Key Vault and use a service principal with a client secret for each application.
   • DUse Key Vault access policies to grant all applications access to all secrets.
   Reveal Solution Discussion Select an answer first