Question 1

Which three tasks can be performed by using Azure Active Directory (Azure AD) Identity Protection? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Options :

A : Configure external access for partner organizations.

B : Export risk detection to third-party utilities.

C : Automate the detection and remediation of identity based-risks.

D : Investigate risks that relate to user authentication.

E : Create and automatically assign sensitivity labels to data.

Answer: A,C,D

Question 2

In the shared responsibility model for an Azure deployment, what is Microsoft solely responsible for managing?

Options :

A : the management of mobile devices

B : the permissions for the user data stored in Azure

C : the creation and management of user accounts

D : the management of the physical hardware

Answer: D

Question 3

Which of the following is NOT true about Windows Hello convenience PIN?

Options :

A : The PIN is local to the device

B : A TPM chip backs up the PIN

C : The PIN is enabled on domain-joined systems.

D : A secure server stores the PIN

Answer: D

Question 4

Which of the following is Microsoft's offering of Cloud Access Security Broker (CASB) solution?

Options :

A : Microsoft Cloud App Security

B : Microsoft 365 Defender

C : Azure Security Center

D : Azure Defender

Answer: A

Question 5

What is the purpose of identity governance in Azure AD?

Options :

A : To manage security settings for users' identities

B : To manage the authentication and authorization of users' identities

C : To manage users' permissions and roles

D : To manage the lifecycle and attributes of users' identities

Answer: D