Knowledge check

Completed

Choose the best response for each of the questions below.

Check your knowledge

1.

An organization plans to implement Conditional Access. What do admins need to do?

Create policies that enforce organizational rules.

Check that all users have multifactor authentication enabled.

Amend your apps to allow Conditional Access.

2.

Sign-in risk is a signal used by Conditional Access policies to decide whether to grant or deny access. What is sign-in risk?

The probability that the device is owned by the identity owner.

The probability that the authentication request isn't authorized by the identity owner.

The probability that the user is authorized to view data from a particular application.

3.

IT admins have been asked to review Microsoft Entra roles assigned to users, to improve organizational security. Which of the following should they implement?

Remove all global admin roles assigned to users.

Create custom roles.

Replace global admin roles with specific Microsoft Entra roles.

4.

A network administrator is tasked with securing private resources in their organization. They decide to use Microsoft Entra Private Access and want to set up different access policies based on how resources are accessed or for a specific time frame. Which method should they use?

Quick Access

VPN

Global Secure Access app

You must answer all questions before checking your work.