01 AZ-500: Manage Identity and Access

Your organization is considering multifactor authentication in Azure. Your manager asks about secondary verification methods. Which of the following options could serve as secondary verification method?

• You can configure an automated phone call for verification.
• You can configure an automated phone call for verification.
• Emailed link to verification website.

Your organization has implemented multifactor authentication in Azure. Your goal is to provide a status report by user account. Which of the following values could be used to provide a valid MFA status?

• Enforced is a valid MFA status in the report screen.
• Enrolled
• Required

Which of the following options can be used when configuring multifactor authentication in Azure?

• Allowing one-time access is an available option.
• Configure IP addresses outside the company intranet that should be blocked.
• Block a user if stolen password is suspected.

Which of the following methods enable you to automatically add or remove users to security groups or Microsoft 365 groups, so you don't always have to do it manually?

• Dynamic user uses rules to automatically add and remove members.
• Automatic add
• Microsoft 365 user

Which of the following roles would allow the user to manage all the groups in a tenant and would be able to assign other admin roles?

• Global administrator
• Block a user if stolen password is suspected.
• Microsoft 365 user

The IT helpdesk wants to reduce password reset support tickets. You suggest having users sign-in to both on-premises and cloud-based applications using the same password. Your organization does not plan on using Azure AD Identity Protection, so which feature would be easiest to implement given the requirements?

• Password hash synchronization
• Password administrator
• Security administrator

Which tool can you use to synchronize Azure AD passwords with on-premises Active Directory?

• Azure AD Connect
• Active Directory Federation Services
• Password writeback

Azure AD supports which of the following security protocols?

• Oauth
• OpenID Connect
• Kerberos

Which of the following is an authentication option that integrates with Azure Active Directory, requiring you to use several differing methods, like your phone, to confirm your identity?

• Azure Active Directory Multi-Factor Authentication
• Microsoft Authenticator app
• Microsoft Authenticator app

The compliance auditors want to ensure as employees change jobs or leave the company that their privileges are also changed or revoked. They are especially concerned about the Administrator group. To address their concerns. you implement which of the following?

• Access reviews
• JIT virtual machine access
• Azure time-based policies