Question 11

You have an Azure Active Directory (Azure AD) tenant named conto.so.com that has Azure AD Identity Protection enabled. You need to Implement a sign-in risk remediation policy without blocking access.
What should you do first?
  • Question 12

    You have a Microsoft 365 tenant.
    All users must use the Microsoft Authenticator app for multi-factor authentication (MFA) when accessing Microsoft 365 services.
    Some users report that they received an MFA prompt on their Microsoft Authenticator app without initiating a sign-in request.
    You need to block the users automatically when they report an MFA request that they did not Initiate.
    Solution: From the Azure portal, you configure the Block/unblock users settings for multi-factor authentication (MFA).
    Does this meet the goal?
  • Question 13

    Your company has an Azure Active Directory (Azure AD) tenant named Contoso.com. The company has a business partner named Fabrikam, Inc.
    Fabrikam uses Azure AD and has two verified domain names of fabrikam.com and litwarein.com Both domain names are sued for Fabrikam email addresses.
    You create a connected organization for Fabrikam.
    You need to ensure that the package1 will be accessible only to users who have fabrikam.com email addresses.
    What should you do? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 14

    You need to meet the technical requirements for license management by the helpdesk administrators.
    What should you create first, and which tool should you use? To answer, select the appropriate options in the answer area.
    NOTE: Each correct selection is worth one point.

    Question 15

    Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant- Users sign in to computers that run Windows 10 and are joined to the domain.
    You plan to implement Azure AD Seamless Single Sign-On (Azure AD Seamless SSO).
    You need to configure the computers for Azure AD Seamless SSO.
    What should you do?