Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

Microsoft 365 Fundamentals MS-900 > Describe the function and identity types of Microsoft Entra ID > Flashcards

Describe the function and identity types of Microsoft Entra ID Flashcards

(78 cards)

Start Studying
1
Q

what was Microsoft Entra ID formerly known as?

A

Azure Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

Microsoft Entra ID

A

cloud based identity and access management service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

why do organizations use Microsoft Entra ID?

A

to enable their employees, guests, and others to sign in and access the resources they need

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Individuals who use Microsoft Entra ID can access what resources?

A

Internal - apps on your corporate network and intranet, and cloud apps developed by your own organization.
External - Microsoft Office 365, the Azure portal, and any SaaS applications used by your organization

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

t or f

Microsoft Entra ID can be synchronized with your existing on-premises Active Directory, synchronized with other directory services, or used as a standalone service

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

can you use personal devices with Microsoft Entra ID?

A

yes, it allows organizations to securely enable the use of personal devices

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

Identity Secure Score

A

a percentage that functions as an indicator for how aligned you are with Microsoft’s best practice recommendations for security

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

t or f

Each improvement action in identity secure score is tailored to your specific configuration.

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

t or f

Identity secure score, which is available in all editions of Microsoft Entra ID

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

Helps you to objectively measure your identity security posture, plan identity security improvements, and review the success of your improvements

A

Identity secure score

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

Tenant

A

information about a single organization resides including organizational objects such as users, groups, devices, and application registrations

contains access and compliance policies for resources, such as applications registered in the directory.

Each Microsoft Entra tenant has a unique ID (tenant ID) and a domain name (for example, contoso.onmicrosoft.com) and serves as a security and administrative boundary, allowing the organization to manage and control access to resources, applications, devices, and services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

Directory

A

logical container within a Microsoft Entra tenant that holds and organizes the various resources and objects related to identity and access management including users, groups, applications, devices, and other directory objects

the directory is like a database or catalog of identities and resources associated with an organization’s tenant

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Multi-tenant

A

more than one instance of Microsoft Entra ID

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Why do IT admins Microsoft Entra ID?

A

IT admins to control access to corporate apps and resources, based on business requirements

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Why do developers use Microsoft Entra ID?

A

as a standards-based approach for adding single sign-on (SSO) to their apps, so that users can sign in with their pre-existing credentials.

Microsoft Entra ID also provides application programming interfaces (APIs) that allow developers to build personalized app experiences using existing organizational data.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

Who uses Microsoft Entra ID?

A

IT admins
developers
Subscribers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

t or f

Subscribers to Azure services, Microsoft 365, or Dynamics 365 automatically have access to Microsoft Entra ID

A

true

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

How many directories does a Microsoft Entra tenant consist of?

A

One

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Why would an organization have multiple tenants?

A

an organization has multiple subsidiaries or business units that operate independently, organizations that merge or acquire companies, multiple geographical boundaries with various residency regulations, and more.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Types of identities in Microsoft Entra ID

A

user identities
workload identities
device identities
external identities
hybrid identities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What are the three categories of which you can assign an identity to in Microsoft Entra ID?

A

humans
devices
software-based object- applications, VMs, services, containers

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

User identities

A

represent people - employees and external users ( customers, consultants, vendors, partners)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

In Microsoft Entra ID, user identities are characterized by

A

how they authenticate and the user type property

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

Workload Identities

A

Containers
VM
Application
Services

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
Device Identities
mobile device IoT/OT device Desktop computers
26
t or f How the user authenticates is asked relative to the host organization’s Microsoft Entra tenant and can be internal or external
true
27
Internal authentication
user has an account on the host organization’s Microsoft Entra ID and uses that account to authenticate to Microsoft Entra ID
28
External authentication
user authenticates using an external Microsoft Entra account that belongs to another organization, a social network identity, or other external identity provider
29
by default, what types of privileges do guest have
limited
30
external guest
uses an external Microsoft Entra ID account, social identity, or other external identity provider to sign in most external users fall into this catagory
31
external member
uses an external account to authenticate but has member level access in your organization common scenario in multi tenant organizations
32
internal guest
has an account in your Microsoft Entra ID directory but only guest level access in your organization often a legacy user created before the availability of Microsoft Entra B2B
33
Internal member
has an account in your Microsoft Entra ID directory and member level access in your organization generally considered employees of your organization
34
t or f External guests and external members are business-to-business (B2B) collaboration
true
35
external guest users
consultants vendors partners
36
workload identity
an identity you assign to a software workload
37
t or f In Microsoft Entra, workload identities are applications, service principals, and managed identities.
true
38
t or f A service principal is essentially, an identity for an application
true
39
how does an application delegate its identity and access functions to Microsoft Entra ID?
the app must be registered with Microsoft Entra ID to enable it integration
40
what happens once an application is registered?
a service principal is created in each Microsoft Entra tenant where the application is used
41
what core functions does the service principal enable ?
authentication and authorization of the application to resources the are secured by the Microsoft Entra tenant
42
Managed identities
type of service principle that are automatically managed in Microsoft Entra ID and eliminate the need for developers to manage credentials
43
t or f Managed identities provide an identity for applications to use when connecting to Azure resources that support Microsoft Entra authentication and can be used without any extra cost.
true
44
Two types of managed identities
system assigned user assigned
45
System assigned managed identity
Azure resources. the identity is tied to the life cycle of the resource
46
User assigned managed identity
can be created as a standalone Azure resource. can be assigned to on or more instance of an Azure service can be assigned to multiple VMs
47
Microsoft Entra registered devices
BYOD user can access your organizations resources using a personal device
48
t or f Microsoft Entra registered devices register to Microsoft Entra ID without requiring an organizational account to sign in to the device
true
49
Microsoft Entra joined
is a device joined to Microsoft Entra ID through an organizational account
50
Microsoft Entra hybrid joined devices
devices are joined to your on-premises Active Directory and Microsoft Entra ID requiring organizational account to sign in to the device
51
t or f Registering and joining devices to Microsoft Entra ID does not gives users Single Sign-on (SSO) to cloud-based resources
false it does
52
what can IT admins use to focus on mobile device management? (MDM)
Microsoft Intune
53
t or f In Microsoft Entra ID, if you have several identities with the same access needs, you can create a group
true You use groups to give access permissions to all members of the group, instead of having to assign access rights individually
54
t or f Limiting access to Microsoft Entra resources to only those identities who need access is one of the core security principles of Zero Trust
true
55
two types of groups
Security Microsoft 365
56
security group
the most common type of group and it's used to manage user and device access to shared resources
57
how can you create a security group?
requires Microsoft Entra administrator role
58
t or f security groups can be used for a specific security policy
true For example, you may create a security group for a specific security policy such as Self-service password reset or for use with a conditional access policy to require MFA. Members of a security group can include users (including external users), devices, other groups, and service principals
59
Microst 365 group
often referred to as a distribution group, is used for grouping users according to collaboration needs.
60
t or f Members of a Microsoft 365 group can only include users, including users outside of your organization.
true
61
do you need an administrator role to create Microsoft 365 groups?
no
62
how is hybrid identity accomplished?
through provisioning and synchronization
63
inter directory provisioning
is provisioning an identity between two different directory services systems. For a hybrid environment, the most common scenario for inter-directory provisioning is when a user already in Active Directory is provisioned into Microsoft Entra ID.
64
synchronization
responsible for making sure identity information for your on-premises users and groups is matching the cloud.
65
cloud sync
designed to meet and accomplish your hybrid identity goals for the provisioning and synchronization of users, groups, and contacts to Microsoft Entra ID.
66
how does cloud sync work?
cloud providing agent The agent provides a lightweight inter-directory provisioning experience that acts as a bridge between Microsoft Entra ID and Active Directory
67
what provisioning agent does Microsoft Entra Cloud Sync use?
system for Cross-domain Identity Management (SCIM) specification with Microsoft Entra ID to provision and deprovision users and groups
68
SCIM
specification is a standard that is used to automate the exchanging of user or group identity information between identity domains such as Microsoft Entra ID and is becoming the de facto standard for provisioning.
69
External identities
B2B collaboration B2B direct connect Microsoft Entra External ID for customers (preview) Microsoft Entra multi tenant organization
70
B2B collaboration
enables employees of an organization to collaborate with external users by letting them use their preferred identity to sign in to your Microsoft applications or other enterprise application
71
B2B direct connect
create two-way trust relationships with other Microsoft Entra organizations to allow users to seamlessly sign in to your shared resources and vice versa aren't added as guest but are visible and can be monitored in Teams admin center reports
72
Microsoft Entra External ID for customers (Preview)
new customer identity and access management (CIAM) solution solution is intended for businesses that want to make applications available to their customers using the Microsoft Entra platform for identity and access
73
capabilities included in Microsoft Entra External ID for customers (Preview)
SSO Sign up and sign in pages to your apps Add your company branding to the sign up page provide self service account management
74
Multi tenant organizations
has more than one instance of Microsoft Entra ID use a one-way synchronization service called cross-tenant synchronization
75
cross tenant synchronization
ensures that users can access resources, without receiving an invitation email and having to accept a consent prompt in each tenant
76
A project manager is setting up a new project that includes members from different departments. The project manager wants to ensure that project team members can collaborate and have shared access to a mailbox, calendar, files, and the project’s SharePoint site. Which Microsoft Entra feature can the project manager use to accommodate this requirement, without having to involve an administrator?
Microsoft 365 group
77
An organization has completed a full migration to the cloud and has purchased devices for all its employees. All employees sign in to the device through an organizational account configured in Microsoft Entra ID. Select the option that best describes how these devices are set up in Microsoft Entra ID
These devices are set up as Microsoft Entra joined.
78
A developer wants an application to connect to Azure resources that support Microsoft Entra authentication, without having to manage any credentials and without incurring any extra cost. Which option best describes the identity type of the application?
Managed identity

Microsoft 365 Fundamentals MS-900 (13 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions