Authorization/Authentication, MFA, and more

Question 1

MFA

Answer 1

-No license is required to configure MFA, but the user must be a Global Administrator
-Free is reduced funtionality
-You get full featuted MFA with and Azure AD P1 or P2 license

Question 2

What are the four MFA modes?

Answer 2

-Phone call
-SMS texr message
-MS Authenticator app
-OATH token code

Question 3

3 ways to enable MFA in Azure

Answer 3

-Change the user state
-Configure MFA registration policy in Azure AD Identity Protection
-Create a Conditional Access Policy in Azure AD

Question 4

All users start out disabled in MFA

Answer 4

When you enroll users in Azure MFA, their state changes to enabled.
When enabled users sign in and complete the registration process, their state changes to enforced

Question 5

Users are not happy to perform MFA from the same device every time they login. What should you configure to enhance usability?

Answer 5

Enable remember multifactor Authentication

Question 6

What is the difference between OpenID connect and OAuth 2.0?

Answer 6

-OAuth 2.0 is a protocol used for authorization
-OpenID Connect is a protocol used for authentication
-OpenID Connect is an extension of OAuth 2.0

Question 7

In OAuth 2.0/Open ID Connect, what does the authentication provider return to the browser after a successful authentication?

Answer 7

ID token in JSON Web Token (JWT) format

Question 8

Microsoft Hello for Business

Answer 8

include “passwordless” signin model that uses the users face to signin to the local machine

Question 9

Azure AD - B2B

Answer 9

-allows organizations to securly share their apps and services with guest users from other external organizations, while allowing them to retain control over their data.
-provides an easy to use invitation and redemption process that allows external users to use their own credentials to access partner resources
-These users are represented as guest users in your Azure AD

Question 10

B2B Direct Connect

Answer 10

establishes mutual trust relationships for seamless collaboration

Question 11

Azure AD - B2C

Answer 11

-provides business to customer identity as a service
-allows an organizations customers to access the organizations apps via SSO that uses their existing social and enterprise or local account identities
-uses OpenID Connect, OAuth 2.0
-think Facebook, Google, or other providers