AZ-900_Azure_Architecture_and_Services_MCQs P2

What is Microsoft Entra ID primarily used for?

• Managing Azure resources

• Running containerized applications

• Identity and access management

• Hosting web APIs

Which Azure service provides cloud-based directory services without the need for domain controllers?

• Azure DNS

• Microsoft Entra Domain Services

• Azure Functions

• Azure Monitor

What is the purpose of Single Sign-On (SSO)?

• Automatically encrypts all data

• Prevents access to unauthorized networks

• Allows users to authenticate once and access multiple resources

• Synchronizes cloud storage

What does multifactor authentication (MFA) require?

• Two or more authentication factors

• Repeated login attempts

• Admin approval

• Single password

What type of authentication method is considered 'something you have'?

• Password

• Security token

• Fingerprint

• PIN

What is the difference between authentication and authorization?

• Authentication grants access; authorization checks identity

• Authentication checks identity; authorization grants permissions

• Authentication is used for storage; authorization for networking

• There is no difference

What service allows external users to access company resources securely?

• Azure VPN

• Microsoft Entra External ID (B2B)

• Azure DevOps

• Azure Files

What does Conditional Access evaluate before granting access?

• File type

• User's browser version

• Signals like location, device, and user risk

• File size

Which model assumes breach and verifies every access request?

• Zero Trust

• Least Privilege

• Public Access

• Shared Responsibility

What Azure feature provides fine-grained control over who can do what with Azure resources?

• Virtual Machine Scale Sets

• Azure Monitor

• Role-Based Access Control (RBAC)

• Azure CLI