Microsoft Entra

Question 1

Microsoft Entra Terms of Use

Answer 1

Presents information to users before they access data and can be configured to require users to accept the terms of use.

Question 2

Entra ID Password Protection

Answer 2

Prevents users from using specific words in their passwords

Question 3

Which of the following are features of Self-Service Password Reset? (SSPR)

Answer 3

Password change
Password reset
Account unlock
Password write-back

Question 4

Password Hash Synchronization

Answer 4

Syncs passwords (hash of hash) between Active Directory and Microsoft Entra ID.

Question 5

Pass-through Authentication

Answer 5

Provides a simple password validation for Entra ID authentication services by using a software agent that runs on one or more on-prem servers. The servers validate the users directly with an on-prem Active Directory, which ensures that the password validation doesn’t happen in the cloud.

Question 6

Federated Authentication

Answer 6

Entra ID ands off the authentication process to a separate trusted authentication system, such as an on-prem Active Directory Federation Service (AD FS), to validate the user’s password

Question 7

Which of the following are authentication methods used to achieve hybrid identity?

Answer 7

Federation
Password hash synchronization
Pass through authentication

Question 8

Active Directory Domain Services (AD DS)

Answer 8

AD DS allows you to manage multiple on-premises infrastructure components and systems by using a single identity per users. AD DS does not support mobile devices, SaaS applications or LOB apps that require modern authentication methods

Question 9

Federation

Answer 9

Federation enables access to services across organizations.

Question 10

Microsoft Entra External ID

Answer 10

allows external users to sign in with their preferred social, enterprise, or local account identities to get single sign-on (SSO) to applications.

Question 11

An organization is migrating to the Microsoft cloud. The plan is to use a hybrid identity model. What can be used to sync identities between Active Directory Domain Services (AD DS) and Microsoft Entra tenant?

Answer 11

Microsoft Entra Connect

Question 12

Which two additional forms of authentication are available in Microsoft Entra ID for multi-factor authentication (MFA) from any device?

Answer 12

The microsoft Authenticator app
voice call

Question 13

Which of the following security features do security defaults in Entra ID NOT enable?

Answer 13

Requiring users to perform MFA for every signin

Here are the defaults:
Blocking legacy authentication like IMAP, SMPT
Protecting access to Azure Powershell with MFA
Requiring users to perform MFA registration within 14 days