az-900 Practice Question 1867
Exam: az-900
Domain: Describe Azure architecture and services
Topic: Describe Azure identity, access, and security
Difficulty: medium
In a scenario where you need to ensure that only users from specific Azure AD groups can access a particular Azure resource, which Azure service should you configure to enforce this access control?
Answer Options
A
Multi-Factor Authentication (MFA)
B
Conditional Access policies
C
Zero Trust
D
Role-Based Access Control (RBAC)
Correct Answer
D: Role-Based Access Control (RBAC)
Explanation
Azure Role-Based Access Control (RBAC) is used to assign roles and permissions to users or groups to manage access to resources. Multi-Factor Authentication (MFA) is used to add an extra layer of security by requiring users to provide two or more verification factors. Conditional Access policies are used to apply access controls based on user, device, location, and risk factors. Zero Trust is a security framework that assumes that all users and devices are untrusted until proven otherwise, but it does not directly enforce access control.