Exam Tips: Azure Identity, Authentication, and Authorization

Question 1

Identity, Authentication, and Authorization:

Answer 1

• Identity is the unique identifier for digital objects.
• Authentication verifies identity, while authorization assigns specific permissions.
• Microsoft Entra ID provides identity, authentication, and authorization services in Azure.

Question 2

Zero Trust:

Answer 2

• Zero trust assumes all users untrustworthy until proven otherwise.
• It relies on identity verification regardless of location, with no trusted networks.

Question 3

Least Privilege Access:

Answer 3

• Users should have just enough permissions to perform their specific tasks at any given time.
• This approach simplifies centralized management and applies policies based on user roles.

Question 4

Multifactor Authentication (MFA):

Answer 4

• MFA adds an extra layer of security by requiring at least two authentication components, such as something you know, have, or are.
• Microsoft recommends MFA for all Microsoft identities to enhance security.

Question 5

Conditional Access:

Answer 5

• Conditional access provides an additional layer of security by permitting or denying access based on specified rules.
• It is often implemented alongside MFA for enhanced security measures.

Question 6

Passwordless Authentication:

Answer 6

• Passwordless authentication removes the need for passwords and replaces them with more convenient yet secure methods, such as biometrics or PINs.
• It aims to increase convenience while maintaining security.

Question 7

External Guest Access:

Answer 7

• External guest access allows organizations to collaborate securely with external users, providing visibility within organizational IT borders.
• Business-to-business access facilitates trust between different tenants, while business-to-customer access improves integration with customer systems.

Question 8

Microsoft Entras ID Domain Services :

Answer 8

• Microsoft Entra ID DS offers legacy Active Directory features as a managed service in Azure, eliminating the need for infrastructure maintenance.
• It integrates with Microsoft Entra ID for identity and is useful for migrating or integrating legacy applications.

Question 9

Role-Based Access Control (RBAC):

Answer 9

• RBAC controls access to resources based on assigned roles for users, devices, applications, or services.
• Implement least privilege access and role segregation to ensure efficient and secure access management.

Question 10

Defense in Depth at the Identity Level:

Answer 10

• Layered defense at the identity level is essential for protecting user identities and enhancing application security.
• Implement multifactor authentication, conditional access, and passwordless authentication to strengthen identity security.