AZ-900 Objective

Identity and access

Practice examples for this objective. Use the interactive quiz for answer checking, scoring, and detailed explanations.

medium · AZ900-PUBLIC-005

Which pairing correctly separates authentication from authorization in Azure?

A. Microsoft Entra ID verifies who the user is; Azure RBAC controls what the user can do.

B. Azure RBAC verifies the user password; Microsoft Entra ID chooses resource permissions.

C. Azure Marketplace authenticates users; tags authorize resource access.

D. Subscriptions authenticate users; availability zones authorize resource actions.

hard · AZ900-HARD-001

A. Assign an Azure Policy initiative at the management group scope that requires the CostCenter tag.

B. Assign the Owner role to the VM team at the subscription scope.

C. Assign the Virtual Machine Contributor role to the VM team at the appropriate scope.

D. Create a resource lock on each subscription to prevent resources without tags from being created.

medium · AZ900-MCG-004

A. A pricing detail that does not describe identity or access management

B. A deployment model that is not part of Microsoft Entra identity and access management

C. Microsoft Entra ID centralizes identity, sign-in, and access management for users and applications

D. Microsoft Entra ID works with access controls such as roles and permissions to protect resources

E. An unrelated Microsoft service that does not manage Azure identities