SC 900 P1

1. Which Azure Active Directory (Azure AD) feature can you use to provide just-in-time (JIT) access to manage Azure resources?

• Conditional access policies
• Azure AD Identity Protection
• Azure AD Privileged Identity Management (PIM)
• Authentication method policies

2. Which Azure Active Directory (Azure AD) feature can you use to restrict Microsoft Intune-managed devices from accessing corporate resources?

• Network security groups (NSGs)
• Azure AD Privileged Identity Management (PIM)
• Conditional access policies
• Resource locks

3. What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

• Azure Active Directory (Azure AD) Privileged Identíty Management (PIM)
• Azure Multi-Factor Authentication (MFA)
• Azure Directory (Azure AD) Identíty Protection
• Conditional access policies

4. In a hybrid identity model, what can you use to sync identities between Active Directory Domain Services (AD DS) and Azure Active Directory (Azure AD)?

• Active Directory Federation Services (AD FS)
• Azure Sentinel
• Azure AD Connect
• Azure Ad Privileged Identity Management (PIM)

5. What is the purpose of Azure Active Directory (Azure AD) Password Protection?

• to control how often users must change their passwords
• to identify devices to which users can sign in without using MFA
• to encrypt a password by using globally recognized encryption standards
• to prevent users from using specific words in their passwords