AZ-900 Module 5

Authentication is a ...

• Process of granting user access to the system

• Process of creation of new user identities

• Process of verification of user's permissions

• Process of verification of user's identity

• Process of verification that only authenticated identities

  get access to get the resources for which they were

  granted access to by the owners

Answer explanation

A Process in which the system checks whether provided

credentials by a user or system (authentication factors)

match the existing identity, is called Authentication.

Authorization means verification of permissions assigned to

a user by a resource owner.

Which two core functionalities does Azure Active Directory deliver?

• Identity Management

• Access Management

• Resource Management

• Subscription Management

• Identitfication Services

Answer explanation

Azure Active Directory is a centralized service for identity and access management.

Security Principal objects (identities) can represent. Choose 4.

• User

• Group

• Role Assignment

• Service Principal

• Managed Identity

Answer explanation

Security Principal is an Azure object (identity) that can be assigned to a role (ex. users, groups or application/service objects like service principals, or managed identities).

Azure Active Directory _____ automatically signs in users when they are on their corporate devices connected to the corporate network.

• Seamless SSO

• PIM

• AIP

• SSA

Azure RBAC is an authorization system built on Azure Resource Manager that provides fine-grained access management of Azure resources.

• True

• False

Role assignment represents a ...

• Combination of a scope and role definition

• Combination of a security principal, and role definition

• Combination of a scope, security principal, and role definition

• Combination of a scope and role definition

Answer explanation

Role assignment is a combination of the role definition, security principal, and scope.

Colloquially Speaking SCOPE assignment answers to a question ...

• Where can it be done?

• What can be done?

• Who can do it?

Answer explanation

Scope assignment is an answer to the question "Where can it be done?"

Colloquially Speaking SERVICE PRINCIPAL assignment answers to a question ...

• Where can it be done?

• What can be done?

• Who can do it?

Answer explanation

Service Principal assignment is an answer to the question "Where can it be done?"

Colloquially Speaking ROLE DEFINITION assignment answers to a question ...

• Where can it be done?

• What can be done?

• Who can do it?

Answer explanation

Role definition assignment is an answer to the question "Where can it be done?"

Jessica works for Contoso company as an Azure administrator. As part of her role, she needs to be able to view all Azure resources in the Azure subscription called AZ-SUB-01.

But additionally, she needs to be able to perform any actions on a resource group named AZ-ADMIN-RG within that subscription. What is the best strategy to grant her appropriate privileges to perform her tasks?

• Grant a owner role on Azure subscription AZ-SUB-01

• Grant a owner role on Azure subscription AZ-SUB-01 and owner role on AZ-ADMIN-RG resource group

• Grant a owner role on Azure subscription AZ-SUB-01 and reader role on AZ-ADMIN-RG resource group

• Grant a reader role on AZ-ADMIN-RG resource group

• Grant a reader role on Azure subscription AZ-SUB-01 and owner role on AZ-ADMIN-RG resource group

Answer explanation

In order to view all resources on Azure subscription, Jessica will need a reader role applied to the scope of the entire subscription AZ-SUB-01.

In order to allow full access to Jessica on a specific resource group, she needs to be granted another role, in this case, owner role to allow her full access on the AZ-ADMIN-RG resource group.