Microsoft Certified Identity And Access Administrator Associate · Free Practice Question Medium
Question 3
Your organization is aiming to enhance its current security posture. As a part of this improvement process, the management is seeking a way to use If-Then statements based on user or device attributes to set specific conditions that need to be met before granting access to particular applications. Can you suggest the best Azure feature that can be utilized to meet this requirement?
-
A
Azure Logic Apps
-
B
Azure Policy
-
C
RBAC Roles
-
D
Conditional Access Policies
Reveal correct answer
Correct answer: D
Explanation
Please note that answer A, which suggests using Azure Logic Apps, is incorrect for checking user or device attributes as part of the logic statement. Even though Azure Logic Apps provides If-Then logic statements, it would not be the best tool for this task, as it does not meet your requirements.
Similarly, answer B, which recommends using Azure Policy, is incorrect for restricting your helpdesk administrators' role capabilities to only support users within their dedicated region. This solution does not meet your requirements.
Answer C proposes using RBAC roles to grant helpdesk administrators the appropriate permissions. However, it cannot be used to ensure they can only support users within their dedicated region, making it an unsuitable solution.
Answer D is the correct option. It suggests using Conditional Access Policies to build IF-Then statements based on specific signals, such as user or device attributes, before granting access. This solution meets your requirements.
If you want to learn more, go to:
Building a Conditional Access policy - Microsoft Entra ID | Microsoft Learn
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
