Practice Quiz

Which one of the following roles should you have to be able to delete an existing user using Azure AD portal?

• Privileged Authentication Administrator

• Office 365 Administrator

• Global Administrator

• Security Administrator

Answer explanation

The Global Administrator role in Azure AD has the highest level of administrative privileges and can perform various tasks, including user management and deletion. The other roles mentioned, such as Privileged Authentication Administrator, Office 365 Administrator, and Security Administrator, have different levels of administrative permissions but may not have the necessary privileges to delete users.

Privileged Authentication Administrator can also do this however the answer is Global Administrator

_____ are collections of internet-connected systems that an individual controls and uses without their owners' knowledge

• DoS

• DDoS

• Botnet

• bool

Answer explanation

Botnets are collections of internet-connected systems that are under the control of an individual or group without the knowledge or consent of the owners. These systems, often compromised through malware or other malicious means, are used to carry out various activities such as distributed denial-of-service (DDoS) attacks, spam distribution, credential theft, and more.

Azure AD PIM is used to manage which of the following roles?

• Azure privileged users

• Azure AD users

• None

• Custom users

Answer explanation

Azure AD PIM (Privileged Identity Management) is specifically designed to manage and control access to privileged roles in Azure Active Directory (Azure AD) and other Azure resources. It helps organizations enforce just-in-time (JIT) access for privileged roles, provides temporary access, and requires approval for activation. It allows organizations to mitigate the risks associated with privileged access by enabling time-bound and limited access to privileged roles, thereby improving security and reducing the risk of unauthorized access or misuse.

Identity Protection is a tool that allows organizations to accomplish which one of the following?

• The controlling of risks in an environment

• Investigate risks using data in the portal.

• Microsoft Sentinel

• Users with leaked credentials.

Answer explanation

Identity Protection is a tool provided by Microsoft Azure Active Directory (Azure AD) that helps organizations protect user identities and detect potential security risks. It allows administrators to analyze and investigate risky sign-in events, detect anomalies and suspicious activities, and take appropriate actions to secure user accounts. The tool provides insights and data within the portal to help administrators assess and mitigate identity-related risks effectively. It assists in identifying and responding to threats, such as suspicious sign-ins from unfamiliar locations or devices, risky user behavior patterns, and leaked credentials.

_____ Identifies and responds to user accounts that may have compromised credentials. Can prompt the user to create a new password.

• Sign-In risk policy

• MFA registration Policy

• User risk policy

• Error risk policy

Answer explanation

The User risk policy in Azure Active Directory (Azure AD) is designed to identify and respond to user accounts that may have compromised credentials or are at risk of being compromised. It leverages machine learning algorithms and anomaly detection to analyze various factors such as user behavior, sign-in patterns, IP address reputation, and other signals to assess the risk level associated with a user account.

When a user is flagged as having a high-risk profile, the User risk policy can prompt the user to create a new password to enhance security. By enforcing password changes, it helps mitigate the risk of unauthorized access and strengthens the overall security posture of the organization.

Which of the following will integrate your on-premises directories with Azure AD Directory?

• Azure Role-Based Access Control

• Azure Policy

• Azure AD Conditional Access

• Azure AD Connect

Answer explanation

Azure AD Connect is the tool used to integrate on-premises directories, such as Active Directory (AD), with Azure AD Directory. It provides synchronization of user accounts, groups, and other directory objects between the on-premises environment and Azure AD. Azure AD Connect enables organizations to have a unified identity and access management experience across their on-premises and cloud environments.

Which one of the following is an authorization system built on Azure Resource Manager that provides fine-grained access of Azure resources, and helps you manage who has access to those resources and what they can do with them?

• Azure Policy

• Azure Role-Based Access Control

• Azure AD Connect

• Azure AD Conditional Access

Answer explanation

Azure RBAC is an authorization system built on Azure Resource Manager that enables organizations to have fine-grained control over access to Azure resources. It allows you to manage who has access to Azure resources and what actions they can perform on those resources. With Azure RBAC, you can assign users or groups to specific roles with specific permissions, granting them access only to the necessary resources and actions required to perform their tasks.

Azure Policy, on the other hand, is a service that helps enforce and audit compliance with organizational standards and policies in Azure deployments. Azure AD Connect is a tool used to integrate on-premises directories with Azure AD Directory. Azure AD Conditional Access is a service that allows organizations to set conditions and policies to control access to Azure AD resources based on various factors.

In Azure RBAC, the role definition refers to what?

• The set of resources that the access applies to

• a collection of permissions

• The process of attaching a role definition to a user, group, service principal, managed identity.

• An object that represents a user, group, service principal, or managed identity that is requesting access to Azure resources

Answer explanation

In Azure RBAC (Role-Based Access Control), a role definition refers to a collection of permissions that define what actions can be performed on Azure resources. It specifies the scope and the set of permissions associated with a particular role. Role definitions can be pre-defined (built-in roles provided by Azure) or custom-defined (created by the user). Each role definition consists of a name, a set of permissions, and an optional scope that defines the resources to which the role applies.

To grant access to Azure resources, the role definition needs to be associated with a user, group, service principal, or managed identity through the process of role assignment. Role assignment is the process of attaching a role definition to a user, group, service principal, or managed identity, allowing them to access and perform actions on the specified Azure resources.

Which built-in role will allow you to manage everything including access to resources?

• Contributor

• Reader

• Owner

• User Access Administrator

Answer explanation

The "Owner" built-in role in Azure provides the highest level of access and permissions. It allows users to manage everything within an Azure subscription, including the ability to manage access to resources. Owners have full control over all resources and can perform actions such as creating, modifying, and deleting resources, as well as managing access control for other users and roles.

Contributor (option a) is another built-in role that grants users permissions to manage resources but does not include the ability to manage access control for other users. Reader (option b) is a built-in role with read-only access to view resources. User Access Administrator (option d) is a built-in role that allows managing user access to Azure resources, but it does not provide complete control over all aspects of resource management.

_______is a data encryption technology in Azure SQL Database and SQL Server that helps protect sensitive data at rest on the server, during movement between client and server, and while the data is in use?

• Always Encrypted

• Transparent Data Encryption

• Dynamic Data Masking

• Threat Detection

Answer explanation

Always Encrypted is a data encryption technology available in Azure SQL Database and SQL Server. It helps protect sensitive data at rest on the server, during movement between the client and server, and even while the data is in use. With Always Encrypted, the sensitive data remains encrypted in the database, and only the client application with the proper keys can decrypt and access the data. This ensures that sensitive data is protected from unauthorized access, even by database administrators or other privileged users.