6.6 Identify and Describe Access and Permissions Troubleshooting Issues CLOUD-SECURITY-ENGINEER Practice Questions (Page 3)

Questions 11–15

1. 11expert · hard

   A company uses Azure AD Connect to sync on-premises users to Azure AD. Users can authenticate to Azure AD but cannot access an application that requires the 'Employee' group membership. The on-premises group 'Employee' is synced to Azure AD, and the users are members of the group on-premises. What is the most likely cause?

   • AThe users are not assigned licenses for the application
   • BThe group has not been synced to Azure AD yet, or the users' group memberships have not been updated
   • CThe users' passwords are not synchronized
   • DThe application is not configured to accept federated users
   Reveal Solution Discussion Select an answer first
2. 12foundation · easy

   What is the purpose of using monitoring tools in access troubleshooting?

   • ATo create new users
   • BTo trace and identify the root cause of access failures
   • CTo change user passwords
   • DTo delete user accounts
   Reveal Solution Discussion Select an answer first
4. 13foundation · easy

   A user is authenticated but receives a 'permission denied' error when trying to access a resource. What is the most likely cause?

   • AThe user's account is locked
   • BThe user's password has expired
   • CThe user lacks the required RBAC role
   • DThe user's MFA is not configured
   Reveal Solution Discussion Select an answer first
5. 14application · medium

   A developer can list all storage accounts in a subscription but receives an 'AuthorizationFailed' error when trying to read blob containers inside a specific storage account. The developer is a member of the 'Storage Account Contributor' role at the subscription level. What is the most likely cause?

   • AThe storage account has a deny assignment that overrides the subscription-level role
   • BThe developer needs the 'Reader' role instead of 'Storage Account Contributor'
   • CThe storage account firewall is blocking the developer's IP address
   • DThe developer's password has expired and requires a reset
   Reveal Solution Discussion Select an answer first
6. 15application · medium

   A user working from a new office location cannot access a sensitive application, while users at the headquarters can. The user can access other applications that are not protected by conditional access. The user's account is active and the password works. What is the most likely cause?

   • AThe user's password expired overnight
   • BThe user's device is not joined to Azure AD
   • CThe application requires a premium license the user does not have
   • DA conditional access policy blocks access from untrusted locations
   Reveal Solution Discussion Select an answer first