Azure · Identity interview questions

1. A.a container above subscriptions for applying governance and policy at scale
2. B.Microsoft's cloud identity and access management service (formerly Azure AD)
3. C.policies that enforce access controls based on user, device, location, and risk signals
4. D.a service to securely store and manage secrets, keys, and certificates

Answer + AI explanation with Pro

1. A.Microsoft Entra ID
2. B.RBAC
3. C.Key Vault
4. D.Managed Identity

Answer + AI explanation with Pro

1. A.Microsoft Entra ID — Microsoft's cloud identity and access management service (formerly Azure AD)
2. B.Microsoft Entra ID — an identity used by applications or automation to access Azure resources
3. C.Microsoft Entra ID — policies that enforce access controls based on user, device, location, and risk signals
4. D.Microsoft Entra ID — an automatically managed Entra identity for Azure resources to authenticate without secrets

Answer + AI explanation with Pro

1. A.a container above subscriptions for applying governance and policy at scale
2. B.just-in-time, time-bound elevation and oversight of privileged roles
3. C.a service to securely store and manage secrets, keys, and certificates
4. D.Role-Based Access Control; assigns roles to identities scoped to resources or groups

Answer + AI explanation with Pro

1. A.Key Vault
2. B.Service Principal
3. C.Managed Identity
4. D.RBAC

Answer + AI explanation with Pro

1. A.RBAC — just-in-time, time-bound elevation and oversight of privileged roles
2. B.RBAC — policies that enforce access controls based on user, device, location, and risk signals
3. C.RBAC — Role-Based Access Control; assigns roles to identities scoped to resources or groups
4. D.RBAC — Microsoft's cloud identity and access management service (formerly Azure AD)

Answer + AI explanation with Pro

1. A.an identity used by applications or automation to access Azure resources
2. B.just-in-time, time-bound elevation and oversight of privileged roles
3. C.a container above subscriptions for applying governance and policy at scale
4. D.an automatically managed Entra identity for Azure resources to authenticate without secrets

Answer + AI explanation with Pro

1. A.Management Group
2. B.Microsoft Entra ID
3. C.Service Principal
4. D.Managed Identity

Answer + AI explanation with Pro

1. A.Service Principal — an identity used by applications or automation to access Azure resources
2. B.Service Principal — Role-Based Access Control; assigns roles to identities scoped to resources or groups
3. C.Service Principal — a container above subscriptions for applying governance and policy at scale
4. D.Service Principal — policies that enforce access controls based on user, device, location, and risk signals

Answer + AI explanation with Pro

1. A.an automatically managed Entra identity for Azure resources to authenticate without secrets
2. B.just-in-time, time-bound elevation and oversight of privileged roles
3. C.Microsoft's cloud identity and access management service (formerly Azure AD)
4. D.an identity used by applications or automation to access Azure resources

Answer + AI explanation with Pro

1. A.Managed Identity
2. B.Service Principal
3. C.Management Group
4. D.Privileged Identity Management

Answer + AI explanation with Pro

1. A.Managed Identity — Role-Based Access Control; assigns roles to identities scoped to resources or groups
2. B.Managed Identity — an identity used by applications or automation to access Azure resources
3. C.Managed Identity — an automatically managed Entra identity for Azure resources to authenticate without secrets
4. D.Managed Identity — policies that enforce access controls based on user, device, location, and risk signals

Answer + AI explanation with Pro

1. A.a service to securely store and manage secrets, keys, and certificates
2. B.an automatically managed Entra identity for Azure resources to authenticate without secrets
3. C.Role-Based Access Control; assigns roles to identities scoped to resources or groups
4. D.policies that enforce access controls based on user, device, location, and risk signals

Answer + AI explanation with Pro

1. A.RBAC
2. B.Key Vault
3. C.Management Group
4. D.Managed Identity

Answer + AI explanation with Pro

1. A.Key Vault — a container above subscriptions for applying governance and policy at scale
2. B.Key Vault — a service to securely store and manage secrets, keys, and certificates
3. C.Key Vault — an automatically managed Entra identity for Azure resources to authenticate without secrets
4. D.Key Vault — just-in-time, time-bound elevation and oversight of privileged roles

Answer + AI explanation with Pro

1. A.Microsoft's cloud identity and access management service (formerly Azure AD)
2. B.just-in-time, time-bound elevation and oversight of privileged roles
3. C.a container above subscriptions for applying governance and policy at scale
4. D.policies that enforce access controls based on user, device, location, and risk signals

Answer + AI explanation with Pro

1. A.Privileged Identity Management
2. B.RBAC
3. C.Conditional Access
4. D.Service Principal

Answer + AI explanation with Pro

1. A.Conditional Access — Role-Based Access Control; assigns roles to identities scoped to resources or groups
2. B.Conditional Access — a container above subscriptions for applying governance and policy at scale
3. C.Conditional Access — policies that enforce access controls based on user, device, location, and risk signals
4. D.Conditional Access — an automatically managed Entra identity for Azure resources to authenticate without secrets

Answer + AI explanation with Pro

1. A.an identity used by applications or automation to access Azure resources
2. B.a service to securely store and manage secrets, keys, and certificates
3. C.policies that enforce access controls based on user, device, location, and risk signals
4. D.just-in-time, time-bound elevation and oversight of privileged roles

Answer + AI explanation with Pro

1. A.Key Vault
2. B.Privileged Identity Management
3. C.Managed Identity
4. D.Service Principal

Answer + AI explanation with Pro

1. A.Privileged Identity Management — an identity used by applications or automation to access Azure resources
2. B.Privileged Identity Management — policies that enforce access controls based on user, device, location, and risk signals
3. C.Privileged Identity Management — a container above subscriptions for applying governance and policy at scale
4. D.Privileged Identity Management — just-in-time, time-bound elevation and oversight of privileged roles

Answer + AI explanation with Pro

1. A.a container above subscriptions for applying governance and policy at scale
2. B.just-in-time, time-bound elevation and oversight of privileged roles
3. C.a service to securely store and manage secrets, keys, and certificates
4. D.Role-Based Access Control; assigns roles to identities scoped to resources or groups

Answer + AI explanation with Pro

1. A.Microsoft Entra ID
2. B.RBAC
3. C.Conditional Access
4. D.Management Group

Answer + AI explanation with Pro

1. A.Management Group — policies that enforce access controls based on user, device, location, and risk signals
2. B.Management Group — an automatically managed Entra identity for Azure resources to authenticate without secrets
3. C.Management Group — Microsoft's cloud identity and access management service (formerly Azure AD)
4. D.Management Group — a container above subscriptions for applying governance and policy at scale

Answer + AI explanation with Pro

1. A.grants a role to a principal over a specified scope
2. B.lists users in the Microsoft Entra ID tenant
3. C.stores or updates a secret value in an Azure Key Vault
4. D.creates a custom RBAC role from a JSON definition

Answer + AI explanation with Pro

1. A.az role assignment create
2. B.az role definition create
3. C.az keyvault secret set
4. D.az keyvault secret show

Answer + AI explanation with Pro

1. A.az role assignment create — retrieves a secret value from an Azure Key Vault
2. B.az role assignment create — creates a custom RBAC role from a JSON definition
3. C.az role assignment create — grants a role to a principal over a specified scope
4. D.az role assignment create — lists users in the Microsoft Entra ID tenant

Answer + AI explanation with Pro

1. A.grants a role to a principal over a specified scope
2. B.retrieves a secret value from an Azure Key Vault
3. C.lists users in the Microsoft Entra ID tenant
4. D.creates a service principal with role-based access for automation

Answer + AI explanation with Pro

1. A.az ad sp create-for-rbac
2. B.az ad user list
3. C.az keyvault secret set
4. D.az keyvault secret show

Answer + AI explanation with Pro

1. A.az ad sp create-for-rbac — retrieves a secret value from an Azure Key Vault
2. B.az ad sp create-for-rbac — creates a custom RBAC role from a JSON definition
3. C.az ad sp create-for-rbac — creates a service principal with role-based access for automation
4. D.az ad sp create-for-rbac — stores or updates a secret value in an Azure Key Vault

Answer + AI explanation with Pro