SC-900 Authentication vs Authorization Concepts

1. In Azure AD, what is a managed identity used for?

Authenticating users only

Enabling applications to authenticate without storing credentials

Replacing user passwords

Monitoring user behavior

2. Which statement about federation is correct?

It eliminates the need for authentication

It allows organizations to trust external identity providers

It requires storing passwords in multiple locations

It replaces authorization entirely

3. What is the purpose of Azure AD Identity Protection?

To encrypt user passwords

To detect and respond to identity-based risks

To remove the need for authentication

To monitor network bandwidth

4. How does Windows Hello provide secure authentication?

By requiring a USB drive

By using biometric or PIN instead of passwords

By storing passwords in the cloud

By disabling multi-factor authentication

5. What does the principle of least privilege mean in authorization?

Users should have maximum access to all resources

Users should have only the minimum permissions required for their role

All users should have identical permissions

Administrators should grant unlimited access

6. Which Azure AD feature allows administrators to enforce specific security requirements before granting access?

Conditional Access policies

Password resets

User profile settings

License management

7. What is the purpose of an access token in OAuth 2.0?

To identify the user to the authorization server

To grant the client permission to access a resource

To encrypt all network traffic

To replace multi-factor authentication

8. How does Azure AD B2B support external collaboration?

By removing all security controls

By allowing guest users to access resources with their own credentials

By storing external user passwords

By disabling conditional access

9. What is passwordless authentication?

No security is required for access

Authentication without using traditional passwords

Using only biometrics for all users

Removing multi-factor authentication

10. Which authentication protocol is commonly used for modern cloud applications?

NTLM

OAuth 2.0 and OpenID Connect

Kerberos only

Basic authentication

11. What is the primary purpose of authentication in a security system?

Verify the identity of a user or device

Control what resources a user can access

Encrypt data in transit

Monitor network traffic

12. What does single sign-on (SSO) enable users to do?

Use one password for all applications

Access multiple applications with one authentication

Bypass authorization checks

Encrypt their credentials locally

13. Which of the following is NOT a factor in multi-factor authentication?

Something you know (password)

Something you have (phone)

Something you are (biometric)

Something you paid for (subscription)

14. What is role-based access control (RBAC)?

A method of granting permissions based on user roles

A type of encryption algorithm

A password complexity requirement

A network monitoring tool

15. Conditional Access in Azure AD allows organizations to do which of the following?

Apply access policies based on user location and device status

Encrypt all user passwords automatically

Block all external users permanently

Remove the need for authentication

16. Which authentication method uses a time-based code that changes every 30 seconds?

Password-based authentication

Time-based One-Time Password (TOTP)

Biometric authentication

Security key authentication

17. What is the main difference between authentication and authorization?

Authentication is faster than authorization

Authentication verifies identity; authorization grants permissions

Authorization happens before authentication

They are the same concept with different names

18. Azure Active Directory (Azure AD) primarily manages which security function?

Data encryption

Identity and access management

Network firewall rules

Physical security controls

19. What does authorization determine in a security context?

Whether a user's credentials are valid

What actions a user can perform on resources

How often a user must change their password

The encryption level for data storage

20. Which of the following is an example of multi-factor authentication (MFA)?

Password and security question

Username and password only

Password and PIN

Email and phone number

SC-900 Authentication vs Authorization Concepts Quiz