Microsoft Azure Fundamentals (AZ-900) — All Questions
3 questions
Which Azure service provides cloud-based identity and access management, including authentication and single sign-on?
- a.Azure Policy
- b.Microsoft Entra ID✓
- c.Azure Monitor
- d.Azure Blob storage
Microsoft Entra ID (formerly Azure Active Directory) manages identities and provides authentication, single sign-on, and access control. Azure Policy governs resource configuration, Azure Monitor observes resources, and Blob storage stores data.
A security team wants to require a second verification factor and enforce sign-in rules based on user location and device state. Which capabilities provide this?
- a.Resource locks and tags
- b.Blob storage tiers
- c.VNet peering
- d.Multifactor authentication and Conditional Access✓
Multifactor authentication adds a second factor, and Conditional Access enforces policies based on signals such as location and device. Resource locks, storage tiers, and VNet peering are unrelated to sign-in security.
The security principle of layering protections across identity, network, compute, and data so no single failure is catastrophic is called what?
- a.Defense in depth✓
- b.Data residency
- c.Vertical scaling
- d.Consumption-based pricing
Defense in depth uses multiple layers of security controls so a breach of one layer does not compromise the whole system. The other terms describe geography, scaling, and billing, not layered security.