CompTIA
Checkpoint
ISC
HP
Dell
EC-Council
EXIN
Fortinet
ITIL®
Juniper
PMI
Microsoft
VMware
Avaya
Google
Salesforce
Amazon
Palo Alto Networks
Certiport
ISC2
All Vendors
  2. Home
  3. Exams
  4. Microsoft
  5. AZ-305

Free AZ-305 Exam Braindumps (page: 4)

Page 3 of 67
PDF with 319 Questions

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, LtD. Developers at Fabrikam were assigned role-basedaccess control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan.

You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:
-To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
-If the manager does not verify an access permission, automatically revoke that permission. Minimize development effort.

What should you recommend?

  1. In Azure Active Directory (Azure AD), create an access review of Application1.
  2. Create an Azure Automation runbook that runs the Get-AzRoleAssignmentcmdlet.
  3. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
  4. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignmentcmdlet.

Answer(s): A


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-user-access-with-access-reviews



You have an Azure subscription. The subscription has a blob container that contains multiple blobs.
Ten users in the finance department of your company plan to access the blobs during the month of April. You need to recommend a solution to enable access to the blobs during the month of April only.
Which security solution should you include in the recommendation?

  1. shared access signatures (SAS)
  2. Conditional Access policies
  3. certificates
  4. access keys

Answer(s): A

Explanation:

Shared Access Signatures (SAS) allows for limited-time fine grained access control to resources. So you can generate URL, specify duration (for month of April) and disseminate URL to 10 team members. On May 1, the SAS token is automatically invalidated, denying team members continued access.


Reference:

https://docs.microsoft.com/en-us/azure/storage/common/storage-sas-overview



You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.
You have an internal web app named WebApp1 that is hosted on-premises. WebApp1 uses Integrated Windows authentication.
Some users work remotely and do NOT have VPN access to the on-premises network. You need to provide the remote users with single sign-on (SSO) access to WebApp1.
Which two features should you include in the solution? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.

  1. Azure AD Application Proxy
  2. Azure AD Privileged Identity Management (PIM)
  3. Conditional Access policies
  4. Azure Arc
  5. Azure AD enterprise applications
  6. Azure Application Gateway

Answer(s): A,E

Explanation:

A: Application Proxy is a feature of Azure AD that enables users to access on-premises web applications from a remote client. Application Proxy includes both the Application Proxy service which runs in the cloud, and the Application Proxy connector which runs on an on-premises server.
You can configure single sign-on to an Application Proxy application.

E: Add an on-premises app to Azure AD
Now that you've prepared your environment and installed a connector, you're ready to add on-premises applications to Azure AD.

Sign in as an administrator in the Azure portal.

In the left navigation panel, select Azure Active Directory.

Select Enterprise applications, and then select New application.

Select Add an on-premises application button which appears about halfway down the page in the On-premises applications section. Alternatively, you can select Create your own application at the top of the page and then select Configure Application Proxy for secure remote access to an on-premise application.

In the Add your own on-premises application section, provide the following information about your application.
Etc.

Incorrect:
Not C: Conditional Access policies are not required.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/app-proxy/application-proxy-add-on-premises-application



You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users. You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:
-The evaluation must be repeated automatically every three months. Every member must be able to report whether they need to be in Group1.
-Users who report that they do not need to be in Group1 must be removed from Group1 automatically. Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.

What should you include in the recommendation?

  1. Implement Azure AD Identity Protection.
  2. Change the Membership type of Group1 to Dynamic User.
  3. Create an access review.
  4. Implement Azure AD Privileged Identity Management (PIM).

Answer(s): C

Explanation:

Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such asweekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations.


Reference:

https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview#learn-aboutaccess-reviews






Post your Comments and Discuss Microsoft AZ-305 exam with other Community members:

AZ-305 Discussions & Posts