Conditional Access Policies Flashcards
CORRECT
In Azure AD Conditional Access, the session details collection phase of policy evaluation occurs for _____.
A. only those policies that are in report-only mode
B. all enabled policies and policies that are in report-only mode
C. all policies for which app-enforced control are applied and all policies that are in report-only mode
D. only those policies that are enabled
E. I don’t know
B. all enabled policies and policies that are in report-only mode
Explanation:
In the first phase, session details are collected. This first phase of policy evaluation occurs for all enabled policies and for policies that are in report only mode
Using the _____ signal in Azure AD Conditional Access, an administrator can include or exclude certain cloud applications or user actions that will be subject to a policy.
A. cloud apps or actions
B. user risk
C. device
D. named location information
E. I don’t know
A. cloud apps or actions
Explanation:
Using the cloud apps or actions signal, an admin can include or exclude certain cloud applications or user actions that will be subject to a policy
Which Azure AD Conditional Access signal allows administrators to ensure that users who are trying to access specific applications will trigger different Conditional Access policies?
A. user risk
B. user or group membership
C. application
D. named location information
E. I don’t know
C. application
Explanation:
Using the application signal, admins can ensure that users who are trying to access specific applications will trigger different Conditional Access policies
When creating a Conditional Access policy, what settings determine whether or not access should be granted when the conditions of the Conditional Access policy are met?
A. access controls
B. permissions
C. access rules
D. access conditions
E. I don’t know
A. access controls
Explanation:
Access controls determine what happens when the conditions of a Conditional Access policy are met
Access controls determine whether or not access should be granted, or if extra verification should be required.
For example, a policy might reach a decision to block access to a resource or it may Grant access
Which of the following will look at the assignments and access controls that you’ve defined and make resource access decisions based on them?
A. A compliance policy
B. A resource lock
C. A stateful access policy
D. A conditional access policy
I don’t know
D. A conditional access policy
Explanation:
When you build a conditional access policy, what you are really doing is building an if then statement that consists of Assignments and Access controls
A conditional access policy will look at the assignments and access controls that youve defined and make decisions based on them. This in turn enforces organizational policies