AZ-500 - Assessment 1

Your organization is considering multifactor authentication in Azure. Your manager asks about secondary

verification methods. Which of the following options could serve as secondary verification method?

•  Automated phone call.

  †

  †

• Emailed link to verification website.

  †

  †

• Microsoft account verification code.

• None of the above

Your organization has implemented multifactor authentication in Azure. Your goal is to provide a status

report by user account. Which of the following values could be used to provide a valid MFA status?

†

†

†

• Enrolled

• Enforced

• Required

• None of the above

Which of the following options can be used when configuring multifactor authentication in Azure?

†

• † Block a user if stolen password is suspected.

  †

  †

• Configure IP addresses outside the company intranet that should be blocked.

• One time bypass for a user that is locked out.

When configuring Azure AD roles, which of the following roles would allow the user to manage all the

groups in a tenant and would be able to assign other admin roles?

• Global administrator

  †

• † Password administrator

  †

• † Security administrator

• † User administrator

Which of the following methods could be used to create an Azure AD security group?

†

†

• Automatic add

• Dynamic user

  †

  †

• Microsoft 365 user

• None of the above

The IT helpdesk wants to reduce password reset support tickets. You suggest having users sign-in to both

on-premises and cloud-based applications using the same password. Your organization does not plan on

using Azure AD Identity Protection, so which feature would be easiest to implement given the require-

ments?

†

†

• Federation

• Pass-through authentication

  †

  †

• Password hash synchronization

Which tool can you use to synchronize Active AD passwords with on-premises Active Directory?

• Azure AD Connect

  †

  †

• Active Directory Federation Services

  †

  †

• Password writeback

Azure AD supports which of the following security protocols?

†

• † Kerberos

• OAuth

  †

• † Open Connect ID

• SAML

Which of the following is an authentication option that integrates with Azure Active Directory, requiring

you to use several differing methods, like your phone, to confirm your identity?

†

†

• FIDO2 security keys

  †

  †

• Microsoft Authenticator app

• Azure Active Directory Multi-Factor Authentication

Identity Protection has reported that a user’s credentials have been leaked. According to policy, the user’s

password must be reset. Which Azure AD role can reset the password?

• Global Administrator

  †

• † Security Administrator

• †

  † Security Operator

• User Administrator