Manage Azure identities and governance
Practise only this domain. 50 questions with explanations, 20 at a time.
Start this domainSample questions
- A platform team needs an identity for an unattended deployment script that will read and write resources in an Azure subscription. The identity must not be tied to a person and must be able to hold its own credentials. Which identity type should the team create?Easy
- An operator must be able to start, stop and reconfigure virtual machines in one resource group, and must have no rights anywhere else in the subscription. Which mechanism should be used?Easy
- An administrator wants to assign a custom rule that permits only a specific list of virtual machine sizes. What must exist before that assignment can be created?Easy
- An administrator must create 500 new cloud-only user accounts in Microsoft Entra ID and wants to submit them in one operation using a comma-separated template downloaded from the portal. Which approach should be used?Medium
- A user's password has expired. The account is enabled, licensed and not locked out, yet the user cannot sign in to any application. What should be attempted first?Medium
- A company wants administrators to hold no standing privileged role. Instead they should request elevation for a few hours, with approval and MFA, and every activation must be auditable. Which feature provides this?Medium
- A custom role definition must grant read access to every resource type from every resource provider, and nothing else. Which actions entry accomplishes this?Medium
- A policy must add a tag with a fixed value to a resource request when, and only when, that tag is absent, without altering any other property. Which effect does this?Medium
- Which combination provides the strongest protection for a highly privileged directory role?Hard
- Quarterly access reviews will cover all guest users in the tenant. Which reviewer options does Microsoft Entra access reviews support?Hard
- After a Conditional Access policy blocks legacy authentication, staff using an old mail client can no longer connect. What resolution keeps the security posture intact?Hard