Manage Identities and Access

Question 1

Azure Active Directory - Users with leadked credentials

What is the risk level and detection type?

Answer 1

Azure Active Directory - Users with leadked credentials

What is the risk level and detection type?

Risk Level: High

Detection Type: Offline

Categories: What is risk? Azure AD Identity Protection | Microsoft Docs

Investigate risk Azure Active Directory Identity Protection | Microsoft Docs

Question 2

Azure Active Directory - sign-ins from anonymous IP addresses

What is the risk level and detection type?

Answer 2

Azure Active Directory - sign-ins from anonymous IP addresses

What is the risk level and detection type?

Risk Level: Medium

Detection Type: Real-time

Question 3

Azure Active Directory - Impossible travel to atypical locations

What is the risk level and detection type?

Answer 3

Azure Active Directory - Impossible travel to atypical locations

What is the risk level and detection type?

Risk Level: Medium

Detection Type: Offline

Question 4

Azure Active Directory - Sign-ins from infected devices

What is the risk level and detection type?

Answer 4

Azure Active Directory - Sign-ins from infected devices

What is the risk level and detection type?

Risk Level: Low

Detection Type: Offline

Question 5

Azure Active Directory - Sign-ins from unfamiliar locations

What is the risk level and detection type?

Answer 5

Azure Active Directory - Sign-ins from unfamiliar locations

What is the risk level and detection type?

Risk Level: Medium

Detection Type: Real-time

Question 6

Azure Active Directory - Sign-ins from IP addresses with suspicious activity

What is the risk level and detection type?

Answer 6

Azure Active Directory - Sign-ins from IP addresses with suspicious activity

What is the risk level and detection type?

Risk Level: Low

Detection Type: Real-time

Question 7

Authentication Methods - Decision Tree

Password Hash Sync + Seamless SSO

Answer 7

Authentication Methods - Decision Tree

Password Hash Sync + Seamless SSO

• Scenario 1
  
  • Azure AD to handle sign-ins

Flow Diagram

Question 8

Authentication Methods - Decision Tree

Pass-through Auth + Seamless SSO

Answer 8

Authentication Methods - Decision Tree

Pass-through Auth + Seamless SSO

• Scenario 1
  
  • Azure AD to handle sign-ins
  • Enforcing Azure Directory security policies
• Scenario 2
  
  • Sign-ins handled on-premise (not in the cloud)

Flow Diagram

Question 9

Authentication Methods - Decision Tree

Pass-through Auth + Seamless SSO with Password Hash Sync

Answer 9

Authentication Methods - Decision Tree

Pass-through Auth + Seamless SSO with Password Hash Sync

• Scenario 1
  
  • Azure AD to handle sign-ins
  • Enforcing Azure Directory security policies
  • Disaster recovery needed or credential reports needed
• Scenario 2
  
  • Sign-ins handled on-premise (not in the cloud)
  • Disaster recovery needed or credential reports needed

Flow Diagram

Question 10

Authentication Methods - Decision Tree

Federation

Answer 10

Authentication Methods - Decision Tree

Federation

• Scenario 1
  
  • Azure AD to handle sign-ins
  • Sign-in requirement no supported by Azure
• Scenario 2
  
  • Azure AD to handle sign-ins
  • Enforcing Azure Directory security policies
  • Sign-in requirement no supported by Azure
• Scenario 3
  
  • Sign-ins handled on-premise (not in the cloud)
  • Integration with Federation provider

Flow Diagram

Note: If disaster recovery or credential reports is needed, then Federation with Password Hash Sync is required.

Question 11

Authentication Methods - Decision Tree

Federation with Password Hash Sync

Answer 11

Authentication Methods - Decision Tree

Federation with Password Hash Sync

• Scenario 1
  
  • Azure AD to handle sign-ins
  • Sign-in requirement no supported by Azure
  • Disaster recovery needed or credential reports needed
• Scenario 2
  
  • Azure AD to handle sign-ins
  • Enforcing Azure Directory security policies
  • Sign-in requirement no supported by Azure
  • Disaster recovery needed or credential reports needed
• Scenario 3
  
  • Sign-ins handled on-premise (not in the cloud)
  • Integration with Federation provider
  • Disaster recovery needed or credential reports needed

Flow Diagram