DRAG DROP
-
Match the types of Conditional Access signals to the appropriate definitions.
To answer, drag the appropriate Conditional Access signal type from the column on the left to its definition on the right. Each signal type may be used once, more than once, or not at all.
NOTE: Each correct match is worth one point.
Show Answer
Correct Answer: User risk → The probability that an identity or account is compromised.
Sign-in risk → The probability that an authentication request isn't authorized by the identity owner.
Explanation: In Microsoft Entra Conditional Access, User risk measures the likelihood the user account has been compromised, while Sign-in risk measures the likelihood that a specific authentication attempt is not being performed by the legitimate owner.
Question 43
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: continuously
Explanation: Microsoft Defender for Cloud continuously assesses Azure resources for security issues and updates security recommendations as resource states change.
Question 44
When you enable Azure AD Multi-Factor Authentication (MFA), how many factors are required for authentication?
A. 1
B. 2
C. 3
D. 4
Show Answer
Correct Answer: B
Explanation: Multi-Factor Authentication requires two or more verification factors from different categories. Enabling Azure AD (Microsoft Entra ID) MFA adds a second factor to the standard sign-in, so authentication requires two factors.
Question 45
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft Service Trust Portal
Explanation: The Microsoft Service Trust Portal provides audit reports, compliance documentation, certifications, and other compliance-related information for Microsoft cloud services.
Question 46
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Conditional Access is implemented through Microsoft Entra ID policies. Policies can include the device platform as a condition to allow or block access. Policies target users, workload identities, directory roles, and groups (security groups); they are not applied to Microsoft 365 groups as such.
Question 47
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: A user-assigned managed identity
Explanation: A user-assigned managed identity is a standalone Azure resource that can be attached to multiple Azure web apps, allowing them to share the same identity. A system-assigned managed identity is unique to a single resource.
Question 48
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: No
No
Yes
Explanation: Communication compliance is configured in Microsoft Purview (not the Microsoft 365 admin center). It monitors supported communication workloads rather than SharePoint document content. It includes remediation workflows for detected policy violations.
Question 49
HOTSPOT
-
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Show Answer
Correct Answer: Yes
Yes
No
Explanation: Retention policies apply the same retention settings to all content within their configured scope (such as a SharePoint library/location). Retention labels can be applied to individual files and email messages, but each item can have only one retention label at a time.
Question 50
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: after
Explanation: Microsoft Entra Conditional Access evaluates policies after the user successfully completes first-factor authentication, then applies required controls (such as MFA, device compliance, or blocking access).
Question 51
HOTSPOT
-
Select the answer that correctly completes the sentence.
Show Answer
Correct Answer: Microsoft cloud security benchmark
Explanation: The Microsoft Cloud Security Benchmark provides baseline security recommendations and guidance for protecting Azure services.
$19
Get all 230 questions with detailed answers and explanations
Instant download HTML + PDF delivered the moment payment clears.
Secure Stripe checkout we never see or store your card details.
7-day refund if files are defective see our refund policy.
