Implement an Azure Active Directory (15-20%)

Question 1

What is Microsoft’s multi-tenant cloud based directory and identity management service

Answer 1

Azure Active Directory (Azuer AD)

Question 2

What tool is needed to sync onprem AD to Azure AD?

Answer 2

Azure AD Connect

Question 3

What are the 2 ways to integrate and Azure AD with Existing Directories?

Answer 3

1. Synchronization - This component is responsible for creating users, groups, and other objects. It is also responsible for making sure identity information for your on-premises users and groups is matching the cloud. Password write-back can also be enabled to keep on-premises directories in sync when a user updates their password in Azure AD.
2. Federation is an optional capability provided by Azure AD Connect that can be used to configure a hybrid environment using an on-premises AD FS infrastructure. Federation can be used by organizations to address complex deployments, such as single sign on, enforcement of AD sign-in policy, and smart card or third party MFA.

Question 4

3 Ways Azure AD support sing into applications?

Answer 4

1. Federated Single Sign on: redirect to Azure AD/ADFS for authentication
2. Password-based Single Sign-On: password is replayed via a web extension or app via the existing app’s sign-in procees
3. Existing Single Sign-On: Leverage anther SSO provider like ping or okta.

Question 5

What is Azure AD B2C?

Answer 5

Allows your cloud apps to integrate authentication with 3rd parties like Facebook, Google, LinkedIn, etc.

Question 6

What is Azure AD B2B?

Answer 6

Connect and share information with Vendors without having to link Domains.

Question 7

What are the 4 Report Categories in Azure AD?

Answer 7

1. Anomaly Reports
2. Integrated Application Reports
3. Error Reports
4. User Specific Reports
5. Activity Logs

Question 8

3 Editions of Azure AD?

Answer 8

1. Free
2. Basic
3. Premium

Question 9

Which edition of Azure AD is needed for Self-service password reset?

Answer 9

Azure AD Premium or Basic

Question 10

Which edition of Azure AD is needed for password write-back?

Answer 10

Azure AD Premium

Question 11

What is the Access Panel in Azure for end users?

Answer 11

The Access Panel is a web-based portal. It enables a user who has a work or school account in Azure Active Directory (Azure AD) to view and start cloud-based applications that the Azure AD administrator has granted them access to. A user who has Azure AD editions can also use self-service group management capabilities through the Access Panel.

Question 12

URL for Access Panel in Azure?

Answer 12

http://myapps.microsoft.com

Question 13

What is the Graph API?

Answer 13

Programmatic access to AAD through the REST API Endpoint. Requires joining an app to AAD.