Correct Answer:

Reference: https://privacy.microsoft.com/en-US/

Correct Answer:

Box 1: No

Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.

Box 2: Yes

Microsoft 365 uses Azure Active Directory (Azure AD). Azure Active Directory (Azure AD) is included with your Microsoft 365 subscription.

Box 3: Yes

Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.

Reference:

https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

Correct Answer:

Reference: https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-intune https://docs.microsoft.com/en-us/mem/intune/fundamentals/what-is-device-management

Correct Answer:

Box 1: Yes

Microsoft's identity solutions span on-premises and cloud-based capabilities. These solutions create a common user identity for authentication and authorization to all resources, regardless of location. We call this hybrid identity.

With hybrid identity to Azure AD and hybrid identity management these scenarios become possible.

To achieve hybrid identity with Azure AD, one of three authentication methods can be used, depending on your scenarios. The three methods are:

Password hash synchronization (PHS)

Pass-through authentication (PTA)

Federation (AD FS)

Note: Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect synchronizes a hash of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD

instance.

Box 2: No

Need to configure password synchronization.

The user accounts created on-premises would then be synchronized to the cloud.

Box 3: Yes

Federated authentication

Federated authentication is primarily for large enterprise organizations with more complex authentication requirements. AD DS identities are synchronized with Microsoft 365 and users accounts are managed on-premises. With federated

authentication, users have the same password on-premises and in the cloud and they do not have to sign in again to use Microsoft 365.

For third-party authentication and identity providers, on-premises directory objects may be synchronized to Microsoft 365 and cloud resource access that are primarily managed by a third-party identity provider (IdP). If your organization uses a

third-party federation solution, you can configure sign-on with that solution for Microsoft 365 provided that the third-party federation solution is compatible with Azure AD.

Reference:

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identity

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-phs

https://learn.microsoft.com/en-us/microsoft-365/enterprise/deploy-identity-solution-identity-model?

Correct Answer: C

The Microsoft Service Trust Portal contains details about Microsoft's implementation of controls and processes that protect our cloud services and the customer data therein.

Reference: https://docs.microsoft.com/en-us/microsoft-365/compliance/get-started-with-service-trust-portal?view=o365-worldwide

Correct Answer: C

Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-azure-ad-connect

Correct Answer: C

Azure AD Privileged Identity Management (PIM) provides just-in-time privileged access to Azure AD and Azure resources

Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Correct Answer: D

Network protection helps protect devices from Internet-based events. Network protection is an attack surface reduction capability.

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender-endpoint/network-protection?view=o365-worldwide

Correct Answer: D

https://learn.microsoft.com/en-us/purview/compliance-score-calculation

Correct Answer: A

Keywords = trends and track = Reports