Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Microsoft 365 Fundamentals MS-900 > Describe the function and identity types of Microsoft Entra ID > Flashcards

Describe the function and identity types of Microsoft Entra ID Flashcards

1
Q

what was Microsoft Entra ID formerly known as?

A

Azure Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Microsoft Entra ID

A

cloud based identity and access management service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

why do organizations use Microsoft Entra ID?

A

to enable their employees, guests, and others to sign in and access the resources they need

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Individuals who use Microsoft Entra ID can access what resources?

A

Internal - apps on your corporate network and intranet, and cloud apps developed by your own organization.
External - Microsoft Office 365, the Azure portal, and any SaaS applications used by your organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

t or f

Microsoft Entra ID can be synchronized with your existing on-premises Active Directory, synchronized with other directory services, or used as a standalone service

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

can you use personal devices with Microsoft Entra ID?

A

yes, it allows organizations to securely enable the use of personal devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Identity Secure Score

A

a percentage that functions as an indicator for how aligned you are with Microsoft’s best practice recommendations for security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

t or f

Each improvement action in identity secure score is tailored to your specific configuration.

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

t or f

Identity secure score, which is available in all editions of Microsoft Entra ID

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Helps you to objectively measure your identity security posture, plan identity security improvements, and review the success of your improvements

A

Identity secure score

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Tenant

A

information about a single organization resides including organizational objects such as users, groups, devices, and application registrations

contains access and compliance policies for resources, such as applications registered in the directory.

Each Microsoft Entra tenant has a unique ID (tenant ID) and a domain name (for example, contoso.onmicrosoft.com) and serves as a security and administrative boundary, allowing the organization to manage and control access to resources, applications, devices, and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Directory

A

logical container within a Microsoft Entra tenant that holds and organizes the various resources and objects related to identity and access management including users, groups, applications, devices, and other directory objects

the directory is like a database or catalog of identities and resources associated with an organization’s tenant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Multi-tenant

A

more than one instance of Microsoft Entra ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why do IT admins Microsoft Entra ID?

A

IT admins to control access to corporate apps and resources, based on business requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Why do developers use Microsoft Entra ID?

A

as a standards-based approach for adding single sign-on (SSO) to their apps, so that users can sign in with their pre-existing credentials.

Microsoft Entra ID also provides application programming interfaces (APIs) that allow developers to build personalized app experiences using existing organizational data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Who uses Microsoft Entra ID?

A

IT admins
developers
Subscribers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

t or f

Subscribers to Azure services, Microsoft 365, or Dynamics 365 automatically have access to Microsoft Entra ID

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How many directories does a Microsoft Entra tenant consist of?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Why would an organization have multiple tenants?

A

an organization has multiple subsidiaries or business units that operate independently, organizations that merge or acquire companies, multiple geographical boundaries with various residency regulations, and more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Types of identities in Microsoft Entra ID

A

user identities
workload identities
device identities
external identities
hybrid identities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the three categories of which you can assign an identity to in Microsoft Entra ID?

A

humans
devices
software-based object- applications, VMs, services, containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

User identities

A

represent people - employees and external users ( customers, consultants, vendors, partners)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

In Microsoft Entra ID, user identities are characterized by

A

how they authenticate and the user type property

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Workload Identities

A

Containers
VM
Application
Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Q

Device Identities

A

mobile device
IoT/OT device
Desktop computers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
26
Q

t or f

How the user authenticates is asked relative to the host organization’s Microsoft Entra tenant and can be internal or external

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
27
Q

Internal authentication

A

user has an account on the host organization’s Microsoft Entra ID and uses that account to authenticate to Microsoft Entra ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
28
Q

External authentication

A

user authenticates using an external Microsoft Entra account that belongs to another organization, a social network identity, or other external identity provider

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
29
Q

by default, what types of privileges to guest have

A

limited

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
30
Q

external guest

A

uses an external Microsoft Entra ID account, social identity, or other external identity provider to sign in

most external users fall into this catagory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
31
Q

external member

A

uses an external account to authenticate but has member level access in your organization

common scenario in multi tenant organizations

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
32
Q

internal guest

A

has an account in your Microsoft Entra ID directory but only guest level access in your organization

often a legacy user created before the availability of Microsoft Entra B2B

33
Q

Internal member

A

has an account in your Microsoft Entra ID directory and member level access in your organization

generally considered employees of your organization

34
Q

t or f

External guests and external members are business-to-business (B2B) collaboration

A

true

35
Q

external guest users

A

consultants
vendors
partners

36
Q

workload identity

A

an identity you assign to a software workload

37
Q

t or f

In Microsoft Entra, workload identities are applications, service principals, and managed identities.

A

true

38
Q

t or f

A service principal is essentially, an identity for an application

A

true

39
Q

how does an application delegate its identity and access functions to Microsoft Entra ID?

A

the app must be registered with Microsoft Entra ID to enable it integration

40
Q

what happens once an application is registered?

A

a service principal is created in each Microsoft Entra tenant where the application is used

41
Q

what core functions does the service principal enable ?

A

authentication and authorization of the application to resources the are secured by the Microsoft Entra tenant

42
Q

Managed identities

A

type of service principle that are automatically managed in Microsoft Entra ID and eliminate the need for developers to manage credentials

43
Q

t or f

Managed identities provide an identity for applications to use when connecting to Azure resources that support Microsoft Entra authentication and can be used without any extra cost.

A

true

44
Q

Two types of managed identities

A

system assigned
user assigned

45
Q

System assigned managed identity

A

Azure resources. the identity is tied to the life cycle of the resource

46
Q

User assigned managed identity

A

can be created as a standalone Azure resource.

can be assigned to on or more instance of an Azure service

can be assigned to multiple VMs

47
Q

Microsoft Entra registered devices

A

BYOD

user can access your organizations resources using a personal device

48
Q

t or f

Microsoft Entra registered devices register to Microsoft Entra ID without requiring an organizational account to sign in to the device

A

true

49
Q

Microsoft Entra joined

A

is a device joined to Microsoft Entra ID through an organizational account

50
Q

Microsoft Entra hybrid joined devices

A

devices are joined to your on-premises Active Directory and Microsoft Entra ID requiring organizational account to sign in to the device

51
Q

t or f

Registering and joining devices to Microsoft Entra ID does not gives users Single Sign-on (SSO) to cloud-based resources

A

false

it does

52
Q

what can IT admins use to focus on mobile device management? (MDM)

A

Microsoft Intune

53
Q

t or f

In Microsoft Entra ID, if you have several identities with the same access needs, you can create a group

A

true

You use groups to give access permissions to all members of the group, instead of having to assign access rights individually

54
Q

t or f

Limiting access to Microsoft Entra resources to only those identities who need access is one of the core security principles of Zero Trust

A

true

55
Q

two types of groups

A

Security
Microsoft 365

56
Q

security group

A

the most common type of group and it’s used to manage user and device access to shared resources

57
Q

how can you create a security group?

A

requires Microsoft Entra administrator role

58
Q

t or f

security groups can be used for a specific security policy

A

true

For example, you may create a security group for a specific security policy such as Self-service password reset or for use with a conditional access policy to require MFA. Members of a security group can include users (including external users), devices, other groups, and service principals

59
Q

Microst 365 group

A

often referred to as a distribution group, is used for grouping users according to collaboration needs.

60
Q

t or f

Members of a Microsoft 365 group can only include users, including users outside of your organization.

A

true

61
Q

do you need an administrator role to create Microsoft 365 groups?

A

no

62
Q

how is hybrid identity accomplished?

A

through provisioning and synchronization

63
Q

inter directory provisioning

A

is provisioning an identity between two different directory services systems. For a hybrid environment, the most common scenario for inter-directory provisioning is when a user already in Active Directory is provisioned into Microsoft Entra ID.

64
Q

synchronization

A

responsible for making sure identity information for your on-premises users and groups is matching the cloud.

65
Q

cloud sync

A

designed to meet and accomplish your hybrid identity goals for the provisioning and synchronization of users, groups, and contacts to Microsoft Entra ID.

66
Q

how does cloud sync work?

A

cloud providing agent

The agent provides a lightweight inter-directory provisioning experience that acts as a bridge between Microsoft Entra ID and Active Directory

67
Q

what provisioning agent does Microsoft Entra Cloud Sync use?

A

system for Cross-domain Identity Management (SCIM) specification with Microsoft Entra ID to provision and deprovision users and groups

68
Q

SCIM

A

specification is a standard that is used to automate the exchanging of user or group identity information between identity domains such as Microsoft Entra ID and is becoming the de facto standard for provisioning.

69
Q

External identities

A

B2B collaboration
B2B direct connect
Microsoft Entra External ID for customers (preview)
Microsoft Entra multi tenant organization

70
Q

B2B collaboration

A

enables employees of an organization to collaborate with external users by letting them use their preferred identity to sign in to your Microsoft applications or other enterprise application

71
Q

B2B direct connect

A

create two-way trust relationships with other Microsoft Entra organizations to allow users to seamlessly sign in to your shared resources and vice versa

aren’t added as guest but are visible and can be monitored in Teams admin center reports

72
Q

Microsoft Entra External ID for customers (Preview)

A

new customer identity and access management (CIAM) solution

solution is intended for businesses that want to make applications available to their customers using the Microsoft Entra platform for identity and access

73
Q

capabilities included in Microsoft Entra External ID for customers (Preview)

A

SSO
Sign up and sign in pages to your apps
Add your company branding to the sign up page
provide self service account management

74
Q

Multi tenant organizations

A

has more than one instance of Microsoft Entra ID

use a one-way synchronization service called cross-tenant synchronization

75
Q

cross tenant synchronization

A

ensures that users can access resources, without receiving an invitation email and having to accept a consent prompt in each tenant

76
Q

A project manager is setting up a new project that includes members from different departments. The project manager wants to ensure that project team members can collaborate and have shared access to a mailbox, calendar, files, and the project’s SharePoint site. Which Microsoft Entra feature can the project manager use to accommodate this requirement, without having to involve an administrator?

A

Microsoft 365 group

77
Q

An organization has completed a full migration to the cloud and has purchased devices for all its employees. All employees sign in to the device through an organizational account configured in Microsoft Entra ID. Select the option that best describes how these devices are set up in Microsoft Entra ID

A

These devices are set up as Microsoft Entra joined.

78
Q

A developer wants an application to connect to Azure resources that support Microsoft Entra authentication, without having to manage any credentials and without incurring any extra cost. Which option best describes the identity type of the application?

A

Managed identity

Microsoft 365 Fundamentals MS-900 (12 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions