1. What is Microsoft Entra ID ? Junior A. a container above subscriptions for applying governance and policy at scale B. Microsoft's cloud identity and access management service (formerly Azure AD) C. policies that enforce access controls based on user, device, location, and risk signals D. a service to securely store and manage secrets, keys, and certificates
2. Which term means: "Microsoft's cloud identity and access management service (formerly Azure AD)"? Junior A. Microsoft Entra ID B. RBAC C. Key Vault D. Managed Identity
3. Which statement is correct? Junior A. Microsoft Entra ID — Microsoft's cloud identity and access management service (formerly Azure AD) B. Microsoft Entra ID — an identity used by applications or automation to access Azure resources C. Microsoft Entra ID — policies that enforce access controls based on user, device, location, and risk signals D. Microsoft Entra ID — an automatically managed Entra identity for Azure resources to authenticate without secrets
4. What is RBAC ? Junior A. a container above subscriptions for applying governance and policy at scale B. just-in-time, time-bound elevation and oversight of privileged roles C. a service to securely store and manage secrets, keys, and certificates D. Role-Based Access Control; assigns roles to identities scoped to resources or groups
5. Which term means: "Role-Based Access Control; assigns roles to identities scoped to resources or groups"? Junior A. Key Vault B. Service Principal C. Managed Identity D. RBAC
6. Which statement is correct? Junior A. RBAC — just-in-time, time-bound elevation and oversight of privileged roles B. RBAC — policies that enforce access controls based on user, device, location, and risk signals C. RBAC — Role-Based Access Control; assigns roles to identities scoped to resources or groups D. RBAC — Microsoft's cloud identity and access management service (formerly Azure AD)
7. What is Service Principal ? Junior A. an identity used by applications or automation to access Azure resources B. just-in-time, time-bound elevation and oversight of privileged roles C. a container above subscriptions for applying governance and policy at scale D. an automatically managed Entra identity for Azure resources to authenticate without secrets
8. Which term means: "an identity used by applications or automation to access Azure resources"? Junior A. Management Group B. Microsoft Entra ID C. Service Principal D. Managed Identity
9. Which statement is correct? Junior A. Service Principal — an identity used by applications or automation to access Azure resources B. Service Principal — Role-Based Access Control; assigns roles to identities scoped to resources or groups C. Service Principal — a container above subscriptions for applying governance and policy at scale D. Service Principal — policies that enforce access controls based on user, device, location, and risk signals
10. What is Managed Identity ? Mid A. an automatically managed Entra identity for Azure resources to authenticate without secrets B. just-in-time, time-bound elevation and oversight of privileged roles C. Microsoft's cloud identity and access management service (formerly Azure AD) D. an identity used by applications or automation to access Azure resources
11. Which term means: "an automatically managed Entra identity for Azure resources to authenticate without secrets"? Mid A. Managed Identity B. Service Principal C. Management Group D. Privileged Identity Management
12. Which statement is correct? Mid A. Managed Identity — Role-Based Access Control; assigns roles to identities scoped to resources or groups B. Managed Identity — an identity used by applications or automation to access Azure resources C. Managed Identity — an automatically managed Entra identity for Azure resources to authenticate without secrets D. Managed Identity — policies that enforce access controls based on user, device, location, and risk signals
13. What is Key Vault ? Mid A. a service to securely store and manage secrets, keys, and certificates B. an automatically managed Entra identity for Azure resources to authenticate without secrets C. Role-Based Access Control; assigns roles to identities scoped to resources or groups D. policies that enforce access controls based on user, device, location, and risk signals
14. Which term means: "a service to securely store and manage secrets, keys, and certificates"? Mid A. RBAC B. Key Vault C. Management Group D. Managed Identity
15. Which statement is correct? Mid A. Key Vault — a container above subscriptions for applying governance and policy at scale B. Key Vault — a service to securely store and manage secrets, keys, and certificates C. Key Vault — an automatically managed Entra identity for Azure resources to authenticate without secrets D. Key Vault — just-in-time, time-bound elevation and oversight of privileged roles
16. What is Conditional Access ? Mid A. Microsoft's cloud identity and access management service (formerly Azure AD) B. just-in-time, time-bound elevation and oversight of privileged roles C. a container above subscriptions for applying governance and policy at scale D. policies that enforce access controls based on user, device, location, and risk signals
17. Which term means: "policies that enforce access controls based on user, device, location, and risk signals"? Mid A. Privileged Identity Management B. RBAC C. Conditional Access D. Service Principal
18. Which statement is correct? Mid A. Conditional Access — Role-Based Access Control; assigns roles to identities scoped to resources or groups B. Conditional Access — a container above subscriptions for applying governance and policy at scale C. Conditional Access — policies that enforce access controls based on user, device, location, and risk signals D. Conditional Access — an automatically managed Entra identity for Azure resources to authenticate without secrets
19. What is Privileged Identity Management ? Senior A. an identity used by applications or automation to access Azure resources B. a service to securely store and manage secrets, keys, and certificates C. policies that enforce access controls based on user, device, location, and risk signals D. just-in-time, time-bound elevation and oversight of privileged roles
20. Which term means: "just-in-time, time-bound elevation and oversight of privileged roles"? Senior A. Key Vault B. Privileged Identity Management C. Managed Identity D. Service Principal
21. Which statement is correct? Senior A. Privileged Identity Management — an identity used by applications or automation to access Azure resources B. Privileged Identity Management — policies that enforce access controls based on user, device, location, and risk signals C. Privileged Identity Management — a container above subscriptions for applying governance and policy at scale D. Privileged Identity Management — just-in-time, time-bound elevation and oversight of privileged roles
22. What is Management Group ? Senior A. a container above subscriptions for applying governance and policy at scale B. just-in-time, time-bound elevation and oversight of privileged roles C. a service to securely store and manage secrets, keys, and certificates D. Role-Based Access Control; assigns roles to identities scoped to resources or groups
23. Which term means: "a container above subscriptions for applying governance and policy at scale"? Senior A. Microsoft Entra ID B. RBAC C. Conditional Access D. Management Group
24. Which statement is correct? Senior A. Management Group — policies that enforce access controls based on user, device, location, and risk signals B. Management Group — an automatically managed Entra identity for Azure resources to authenticate without secrets C. Management Group — Microsoft's cloud identity and access management service (formerly Azure AD) D. Management Group — a container above subscriptions for applying governance and policy at scale
25. What does az role assignment create do? Junior A. grants a role to a principal over a specified scope B. lists users in the Microsoft Entra ID tenant C. stores or updates a secret value in an Azure Key Vault D. creates a custom RBAC role from a JSON definition
26. Which command will grants a role to a principal over a specified scope? Junior A. az role assignment create B. az role definition create C. az keyvault secret set D. az keyvault secret show
27. Which statement is correct? Junior A. az role assignment create — retrieves a secret value from an Azure Key Vault B. az role assignment create — creates a custom RBAC role from a JSON definition C. az role assignment create — grants a role to a principal over a specified scope D. az role assignment create — lists users in the Microsoft Entra ID tenant
28. What does az ad sp create-for-rbac do? Junior A. grants a role to a principal over a specified scope B. retrieves a secret value from an Azure Key Vault C. lists users in the Microsoft Entra ID tenant D. creates a service principal with role-based access for automation
29. Which command will creates a service principal with role-based access for automation? Junior A. az ad sp create-for-rbac B. az ad user list C. az keyvault secret set D. az keyvault secret show
30. Which statement is correct? Junior A. az ad sp create-for-rbac — retrieves a secret value from an Azure Key Vault B. az ad sp create-for-rbac — creates a custom RBAC role from a JSON definition C. az ad sp create-for-rbac — creates a service principal with role-based access for automation D. az ad sp create-for-rbac — stores or updates a secret value in an Azure Key Vault Showing 30 of 42 Azure · Identity questions — the full set, with answers, explanations and an AI tutor on every question, is inside.