Module assessment

1.

An organization plans to implement Conditional Access. What do admins need to do?

Create policies that enforce organizational rules.

Check that all users have multifactor authentication enabled.

Amend your apps to allow Conditional Access.

2.

Sign-in risk is a signal used by Conditional Access policies to decide whether to grant or deny access. What is sign-in risk?

The probability that the device is owned by the identity owner.

The probability that the authentication request isn't authorized by the identity owner.

The probability that the user is authorized to view data from a particular application.

3.

IT admins have been asked to review Microsoft Entra roles assigned to users, to improve organizational security. Which of the following should they implement?

Remove all global admin roles assigned to users.

Create custom roles.

Replace global admin roles with specific Microsoft Entra roles.

4.

A network administrator is tasked with securing private resources in their organization. They decide to use Microsoft Entra Private Access and want to set up different access policies based on how resources are accessed or for a specific time frame. Which method should they use?

Quick Access

VPN

Global Secure Access app

5.

An organization wants to ensure that only phishing-resistant authentication methods are used to access a highly sensitive application. Which Conditional Access grant control should they use?

Require authentication strength

Require multifactor authentication

Session controls

Check your knowledge

Aiseolas