AZ-900 Azure Identity and Security 2 — Questions and Answers
Question 1: Which Azure AD (Microsoft Entra ID) feature requires users to provide two or more verification methods to sign in?
- Multi-factor authentication (Correct answer)
- Single sign-on
- Conditional Access
- Privileged Identity Management
Correct answer: Multi-factor authentication
Multi-factor authentication (MFA) requires two or more verification methods such as a password plus a phone approval.
Question 2: What does Single Sign-On (SSO) primarily provide to users?
- Access to multiple applications with one set of credentials (Correct answer)
- Encryption of data at rest
- Automatic VM patching
- Network traffic filtering
Correct answer: Access to multiple applications with one set of credentials
SSO lets users authenticate once and access multiple connected applications without signing in again.
Question 3: Which Azure service helps protect privileged accounts by providing just-in-time access?
- Privileged Identity Management (PIM) (Correct answer)
- Azure Bastion
- Azure Firewall
- Network Security Groups
Correct answer: Privileged Identity Management (PIM)
PIM provides just-in-time, time-limited activation of privileged roles to reduce standing access.
Question 4: What is the term for Microsoft's identity and access management cloud service formerly called Azure Active Directory?
- Microsoft Entra ID (Correct answer)
- Microsoft Defender
- Azure Sentinel
- Microsoft Intune
Correct answer: Microsoft Entra ID
Azure Active Directory was renamed Microsoft Entra ID and provides cloud identity and access management.
Question 5: Which feature allows you to enforce policies like 'require MFA when signing in from an untrusted location'?
- Conditional Access (Correct answer)
- Azure Policy
- Resource locks
- Management groups
Correct answer: Conditional Access
Conditional Access enforces access controls based on signals such as location, device, and risk.
Question 6: What type of authentication uses a fingerprint or facial recognition instead of a password?
- Biometric authentication (Correct answer)
- Token-based authentication
- Certificate authentication
- Shared key authentication
Correct answer: Biometric authentication
Biometric authentication, such as Windows Hello, verifies identity using physical characteristics like fingerprints or face.
Question 7: Which Azure AD edition feature provides self-service password reset for users?
- Self-Service Password Reset (SSPR) (Correct answer)
- Azure Key Vault
- Managed identities
- Service principals
Correct answer: Self-Service Password Reset (SSPR)
SSPR lets users reset their own passwords without contacting a help desk, reducing support overhead.
AZ-900 Azure Identity and Security 2
Which Azure AD (Microsoft Entra ID) feature requires users to provide two or more verification methods to sign in?