Objective 1.0

Manage identity and access

AZ-500 Practice Questions

Use this page to practise Manage identity and access questions for this certification. Focus on how the exam tests manage identity and access in scenario format — understanding the why behind each answer builds more durable knowledge than memorising options.

Full Practice Test →All Objectives

What this objective tests

AZ-500 Manage identity and access — Key Topics

Manage identity and access questions on this certification test your ability to deploy and manage manage identity and access concepts in scenario-based situations.

Core Manage identity and access concepts and how they apply in real-world cloud scenarios.
How to deploy manage identity and access correctly and verify the outcome.
Troubleshooting manage identity and access issues by interpreting error output and system state.
Cloud best practices and Manage identity and access design trade-offs tested by this certification.

Common exam traps

Where candidates lose marks on Manage identity and access

⚠Selecting the most expensive service when a simpler managed option meets the requirement.
⚠Forgetting that cloud resources must be explicitly secured — defaults are rarely secure.
⚠Choosing a global service fix when the issue is region-specific.
⚠Overlooking cost implications of cross-region data transfer in architecture questions.

AZ-500 Manage identity and access — Practice Questions

30 questions from this objective

Question 2hardmultiple choice

Full question →

A company uses Azure AD Identity Protection. They want to automatically block sign-ins that have a high user risk level, but only for users in the 'Finance' department. They also want to require MFA for medium user risk level for all users (including Finance) when sign-in risk is not blocked. They have already created a Conditional Access policy for the Finance department that has a condition of 'User risk level: High' and a grant control of 'Block access'. What additional configuration is needed to also require MFA for all users with medium user risk?

Question 3hardmulti select

Manage identity and access

AZ-500 Manage identity and access — Key Topics

Where candidates lose marks on Manage identity and access

AZ-500 Manage identity and access — Practice Questions

A company manages Azure AD roles with Privileged Identity Management (PIM). They want to enforce that when a user activates the Global Administrator role, they must provide a justification and also use Multi-Factor Authentication. Which PIM settings should they configure? (Choose two.)

A company uses Azure AD B2B collaboration to invite external vendors. They want to restrict the vendors to only be able to access a specific application, and prevent them from discovering other users or applications in the directory. Which configuration should they apply to the external users?

A company wants to ensure that users can only access Microsoft 365 services (e.g., Exchange Online, SharePoint Online) from devices that are confirmed to be compliant with corporate security policies (e.g., encryption enabled, antivirus active). Which Azure AD policy type should they create?

All AZ-500 Objectives

Manage identity and access

AZ-500 Manage identity and access — Key Topics

Where candidates lose marks on Manage identity and access

AZ-500 Manage identity and access — Practice Questions

A company manages Azure AD roles with Privileged Identity Management (PIM). They want to enforce that when a user activates the Global Administrator role, they must provide a justification and also use Multi-Factor Authentication. Which PIM settings should they configure? (Choose two.)

A company uses Azure AD B2B collaboration to invite external vendors. They want to restrict the vendors to only be able to access a specific application, and prevent them from discovering other users or applications in the directory. Which configuration should they apply to the external users?

A company wants to ensure that users can only access Microsoft 365 services (e.g., Exchange Online, SharePoint Online) from devices that are confirmed to be compliant with corporate security policies (e.g., encryption enabled, antivirus active). Which Azure AD policy type should they create?

All AZ-500 Objectives