Course 3 –  Microsoft Azure Services and Lifecycles

Module 1: Microsoft Azure Identity Services

MICROSOFT AZURE FUNDAMENTALS AZ-900 EXAM PREP SPECIALIZATION

Complete Coursera Study Guide

Enroll in Coursera Microsoft Azure AZ-900

Last updated:

TABLE OF CONTENT

INTRODUCTION – Microsoft Azure Identity Services

In this module, you’ll explore how Azure Active Directory assists in managing and securing identities within your organization. You’ll learn about the implementation of single sign-on, multifactor authentication, and Conditional Access, which together provide a robust framework for secure access.

These features allow users to safely access resources and applications from both your intranet and public networks. By understanding and applying these tools, you’ll enhance security measures and streamline user access, ensuring a more secure and efficient environment.

Learning Objectives

  • Explain the role that single sign-on (SSO), multifactor authentication, and Conditional Access play in managing user identity.
  • Describe how Azure AD provides identity and access management.
  • Explain the difference between authentication and authorization.

KNOWLEDGE CHECK

1. What is the process of establishing the identity of a person or service that wants to access a resource known as?

  • Authentication (CORRECT)
  • Authorisation

Correct: Authentication is the process of establishing the identity of a person or service that wants to access a resource. It involves the act of challenging a party for legitimate credentials and provides the basis for creating a security principle for identity and access control. It establishes whether the user is who they say they are.

2. What kinds of resources can Azure AD help secure?

  • Only external resources 
  • Only internal resources 
  • Both External and Internal Resources (CORRECT)

Correct: Azure AD helps users access both external and internal resources. External resources might include Microsoft Office 365, the Azure portal, and thousands of other software as a service (SaaS) applications. Internal resources might include apps on your corporate network and intranet, along with any cloud applications developed within your organization.

3. True or False

Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

  • True (CORRECT)
  • False

Correct: Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

4. Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification. A code that’s sent to your mobile phone is an example of which type of multi-factor authentication?

  • something you are
  • Something you know
  • Something you have (CORRECT)

Correct: Something you have might be a code that’s sent to your mobile phone.

5. Your company wants to ensure that certain content is only accessible from specific locations. Which of the following solutions is the most suitable to meet this requirement?

  • Multifactor Authentication
  • Conditional Access (CORRECT)
  • Single Sign On (SSO)

Correct: Conditional Access is a tool that’s used by Azure Active Directory to allow (or deny) access to resources based on identity signals. These signals include who the user is, the user’s location, and what device the user is requesting access from.

TEST PREP

1. Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification. Using a fingerprint matches which of the following?

  • Something you have
  • Something you know
  • Something you are. (CORRECT)

Correct: Something you are is typically some sort of biometric property, such as a fingerprint or face scan that’s used on many mobile devices

2. Your company wants to implement a facial recognition system to manage access to certain areas of the building. Which of the following solutions can enable this?

  • Single Sign On (SSO)
  • Conditional Access
  • Multifactor Authentication (CORRECT)

Correct: Multifactor authentication can include something the user knows, has, or is.

3. What is the process of establishing the level of access a person or service has known as?

  • Authorisation (CORRECT)
  • Authentication

Correct: Authorization is the process of establishing what level of access an authenticated person or service has. It specifies what data they’re allowed to access and what they can do with it.

4. Your company has migrated to Azure cloud services and the development team has deployed several new applications for internal use. Users are now complaining about the number of times they are asked to authenticate as they move between different applications. Which of the following solutions can be implemented to reduce this requirement?

  • Single Sign On (SSO) (CORRECT)
  • Multifactor Authentication
  • Conditional Access

Correct: Single sign-on enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

5. What do you think is the purpose of Authentication?

  • Creates user access permissions for new users
  • Creates user access roles
  • Establishes Identity (CORRECT)
  • Establishes Authorization

Correct: Authentication is the process of establishing the identity of a person or service that wants to access a resource. 

6. Which of the following are services provided by Azure Active Directory? 

Select all that apply.

  • Authentication (CORRECT)
  • Network Security
  • Device Management (CORRECT)
  • Application Management (CORRECT)

Correct: Authentication is a service provided by Azure Active Directory.

Correct: Device Management is a service provided by Azure Active Directory.

Correct: Application Management is a service provided by Azure Active Directory.

7. Which of the following would be considered elements of Authentication? 

Select all that apply. 

  • A biometric property such as a fingerprint (CORRECT)
  • An employee badge number
  • An access code sent to users mobile device (CORRECT)
  • A username and password (CORRECT)

Correct: A biometric property is an example of something the user is

Correct: An access code is an example of Something the user has.

Correct: A username and password is an example of Something the user knows.

CONCLUSION – Microsoft Azure Identity Services

In conclusion, this module provides you with a comprehensive understanding of how Azure Active Directory enhances identity management and security. By utilizing single sign-on, multifactor authentication, and Conditional Access, you’ll ensure that users can securely access resources from both your intranet and public networks. These tools not only bolster security but also improve user experience, contributing to a safer and more efficient organizational environment.

Weekly Breakdown
Next Module

Quiztudy Top Courses

Popular in Coursera

Liking our content? Then, don’t forget to ad us to your BOOKMARKS so you can find us easily!

Expanded Thumbnail Promo1

Mood Zone for Studying & Relaxing