az-900 Practice Question 1868
Exam: az-900
Domain: Describe Azure architecture and services
Topic: Describe Azure identity, access, and security
Difficulty: medium
Your organization wants to implement a Zero Trust security model to ensure that only users with specific attributes can access certain resources. Which Azure service would you use to enforce these access rules based on user attributes such as location, device, and risk score?
Answer Options
A
Microsoft Entra ID
B
Azure Active Directory (AAD)
C
Azure Security Center
D
Azure Conditional Access policies
Correct Answer
D: Azure Conditional Access policies
Explanation
Azure Conditional Access policies allow organizations to enforce access controls based on user, device, location, and risk factors, aligning with Zero Trust principles. Microsoft Entra ID provides identity management services, but it does not directly enforce access rules based on user attributes. Azure Active Directory (AAD) is a subset of Microsoft Entra ID and focuses on identity management, not access control enforcement. Azure Security Center provides security monitoring and management tools but does not enforce access rules based on user attributes.