az-900 Practice Question 555
Exam: az-900
Domain: Describe cloud concepts
Topic: Describe cloud computing
Difficulty: medium
For each of the following statements, select Yes if the statement is true. Otherwise, select No.\nNOTE: Each correct selection is worth one point.\n\n‘\nStatements Yes No\nAuthorization to access Azure resources can be provided only to Azure Active Directory ° °\n(Azure AD) users\nIdentities stored in Azure Active Directory (Azure AD), third-party cloud services, and on- ° °\npremises Active Directory can be used to access Azure resources,\n‘Azure has built-in authentication and authorization services that provide secure access to ° °\nAzure resources.
Answer Options
C
Box 1: No -
Correct Answer
C: Box 1: No -
Explanation
Box 1: No -\nAuthorization to access Azure resources can be provided by other identity providers by using federation. A commonly used example of this is to\nfederate your on- premises Active Directory environment with Azure AD and use this federation for authentication and authorization.\nBox 2: Yes -\nAs described above, third-party cloud services and on-premises Active Directory can be used to access Azure resources. This is known as\n'federation'.\nFederation is a collection of domains that have established trust. The level of trust may vary, but typically includes authentication and almost\nalways includes authorization. A typical federation might include a number of organizations that have established trust for shared access to a\nset of resources.\nBox 3: Yes -\nAzure Active Directory (Azure AD) is a centralized identity provider in the cloud. This is the primary built-in authentication and authorization\nservice to provide secure access to Azure resources.