NEW
Font size
WorksheetsAz500
Total questions: 10
Worksheet time: 5mins
Which Azure AD role allows resetting passwords for non-admin users only?
Global Administrator
User Administrator
Password Administrator
Helpdesk Administrator
You need to enforce MFA for users only when they sign in from outside your trusted IP ranges. Which feature should you use?
Conditional Access
Privileged Identity Management
Access Reviews
Azure AD Identity Protection
An app needs to read users’ email without requiring them to be signed in. Which permission type should you assign?
Delegated permissions
Application permissions
Device permissions
Role-based permissions
To enforce “just-in-time” privileged role activation in Azure AD, you should use:
Conditional Access Policies
Azure AD Access Reviews
Privileged Identity Management (PIM)
Role-based Access Control (RBAC)
To automatically remove inactive guest users after 90 days, you should configure:
Conditional Access + MFA
Access Reviews with recurrence
Azure AD B2C Policies
Privileged Identity Management
Azure Disk Encryption uses:
BitLocker & DM-Crypt with keys in Key Vault
SSL/TLS certificates only
Azure Backup service only
Application Gateway
To allow RDP/SSH access to VMs only when required, you should use:
Azure Bastion
Network Security Group rules with Any/Any
Always-on NSG rules
Virtual Network Peering
To detect risky sign-ins and compromised accounts, you use:
Azure Front Door
Azure AD Identity Protection
Azure Monitor Alerts
Azure Advisor
To automatically remediate non-compliant resources, you should use:
Azure Blueprints
Azure Monitor
Azure Policy with Remediation Tasks
Role-Based Access Control
You want to allow an Azure AD application to authenticate to Azure resources without storing credentials in code. Which feature should you use?
Service Principals with client secrets
Managed Identities
Role Assignments only
Conditional Access
