Azure Active Directory Entra Id MCQ Questions and Answers

Mastering Azure Active Directory Entra Id is crucial for cloud certification success. This dedicated practice set features 171 Azure Active Directory Entra Id MCQ questions and answers designed to mirror real exam scenarios across various AZURE certifications.

📝 171 Questions⏱️ 90 min🎯 Pass: 70%

About Azure Active Directory Entra Id Practice Questions

This detailed quiz focuses on Azure Active Directory Entra Id, covering key concepts and scenarios often found in AZURE exams.

  • Comprehensive coverage of Azure Active Directory Entra Id features.
  • Scenario-based questions testing design and troubleshooting skills.
  • Detailed explanations to reinforce learning.

All 171 Azure Active Directory Entra Id Questions

Browse through the complete list of questions and answers below. Use this resource to review specific concepts or check your understanding of Azure Active Directory Entra Id.

1

Which Microsoft Entra ID (formerly Azure AD) feature allows users to access cloud applications using their local on-premises passwords without sending the password itself to the cloud?

Pass-through Authentication (PTA)
Password Hash Synchronization (PHS)
Active Directory Federation Services (ADFS)
OAuth 2.0
View Explanation
✓ Correct Answer: Pass-through Authentication (PTA)Explanation:PTA validates passwords against the local AD directory via a lightweight agent on-premises.
2

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
3

An administrator wants to ensure that users can only log in from managed devices or from specific IP ranges. Which Entra ID feature should be used?

Conditional Access Policies
Role-Based Access Control (RBAC)
MFA (Multi-Factor Authentication)
Self-Service Password Reset (SSPR)
View Explanation
✓ Correct Answer: Conditional Access PoliciesExplanation:Conditional Access allows you to set granular access requirements (signals) before permitting access to applications.
4

What is the primary role of 'Microsoft Entra Connect'?

To synchronize identity data (users, groups) between on-premises Active Directory and Microsoft Entra ID
To provide internet connectivity to on-premises servers
To manage Azure Virtual Networks
To backup Active Directory
View Explanation
✓ Correct Answer: To synchronize identity data (users, groups) between on-premises Active Directory and Microsoft Entra IDExplanation:Entra Connect provides a bridge for a hybrid identity environment.
5

Which Entra ID role is required to manage all aspects of the directory, including creating users and assigning roles?

Global Administrator
User Administrator
Billing Administrator
Directory Reader
View Explanation
✓ Correct Answer: Global AdministratorExplanation:Global Administrator has full control over all directory features.
6

What is 'Self-Service Password Reset' (SSPR)?

A feature that allows users to reset their own passwords without contacting the help desk
A tool that forces users to change passwords every 30 days
An encryption protocol for passwords
A way to delete user accounts
View Explanation
✓ Correct Answer: A feature that allows users to reset their own passwords without contacting the help deskExplanation:SSPR reduces support costs and improves user productivity.
7

Which Microsoft Entra ID feature provides just-in-time (JIT) administrative access to resources for a limited time?

Privileged Identity Management (PIM)
Identity Protection
Security Defaults
Entra ID Governance
View Explanation
✓ Correct Answer: Privileged Identity Management (PIM)Explanation:PIM helps manage, control, and monitor access to important resources in your organization.
8

What is a 'Dynamic Group' in Microsoft Entra ID?

A group whose membership is automatically determined based on user attributes (e.g., JobTitle = 'Sales')
A group that changes its name frequently
A group used for load balancing
A group that only exists for 24 hours
View Explanation
✓ Correct Answer: A group whose membership is automatically determined based on user attributes (e.g., JobTitle = 'Sales')Explanation:Dynamic groups reduce administrative overhead by automating membership based on rules.
9

Identity Protection in Microsoft Entra ID helps detect and remediate potential vulnerabilities. Which category of 'risk' does it primarily analyze?

User risk and Sign-in risk
Financial risk
Physical security risk
SQL injection risk
View Explanation
✓ Correct Answer: User risk and Sign-in riskExplanation:It uses machine learning to identify suspicious actions related to identity.
10

What is 'Microsoft Entra ID Free' tier primarily missing compared to the 'Premium P1' tier?

Conditional Access and Group-based application access
Creation of users
SSO for 10 apps
MFA for Admins
View Explanation
✓ Correct Answer: Conditional Access and Group-based application accessExplanation:Advanced management and security features like Conditional Access require P1 or P2 licenses.
11

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
12

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
13

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
14

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
15

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
16

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
17

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
18

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
19

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
20

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
21

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
22

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
23

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
24

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
25

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
26

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
27

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
28

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
29

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
30

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
31

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
32

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
33

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
34

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
35

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Share full administrative credentials
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
36

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
37

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
38

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
39

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
40

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
41

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
42

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
43

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
44

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
45

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
46

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
47

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
48

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
49

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
50

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
51

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
52

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
53

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
54

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
55

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
56

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
57

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
58

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
59

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
60

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
61

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
62

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
63

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
64

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
65

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
66

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
67

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
68

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
69

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
70

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
71

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
72

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
73

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
74

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
75

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
76

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
77

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
78

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
79

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
80

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
81

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
82

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
83

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
84

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
85

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
86

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
87

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
88

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
89

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
90

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
91

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
92

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
93

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
94

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
95

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
96

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
97

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
98

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
99

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
100

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
101

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
102

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
103

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
104

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
105

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
106

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
107

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
108

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
109

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
110

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
111

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
112

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
113

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
114

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
115

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
116

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
117

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
118

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Share full administrative credentials
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
119

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
120

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
121

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
122

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
123

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
124

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
125

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
126

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
127

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
128

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
129

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
130

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
131

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
132

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
133

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
134

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
135

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
136

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
137

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
138

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
139

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
140

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
141

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
142

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
143

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
144

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
145

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
146

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
147

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
148

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
149

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
150

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
151

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
152

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
153

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
154

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
155

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
156

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
157

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
158

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
159

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
160

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
161

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
162

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
Create long-term access keys for each developer
Use Azure Virtual Machines instance profiles
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
163

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
164

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
165

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Azure Active Directory (Entra ID) Roles with cross-account access
Share access keys between accounts
Create duplicate users in both accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
166

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
Share full administrative credentials
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
167

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Roles with cross-account access
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
168

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Use Azure Virtual Machines instance profiles
Create long-term access keys for each developer
Share full administrative credentials
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
169

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Create duplicate users in both accounts
Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.
170

You need to grant developers read-only access to Azure Blob Storage buckets without giving them access to other services. What's the best approach using Azure Active Directory (Entra ID)?

Create long-term access keys for each developer
Share full administrative credentials
Use Azure Virtual Machines instance profiles
Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a group
View Explanation
✓ Correct Answer: Create an Azure Active Directory (Entra ID) policy with Azure Blob Storage read permissions and attach it to a groupExplanation:Azure Active Directory (Entra ID) allows you to define granular permissions. Attaching policies to groups follows the principle of least privilege and simplifies management.
171

Your organization has multiple cloud accounts. Users in Account A need temporary access to resources in Account B. What Azure Active Directory (Entra ID) feature should you use?

Azure Active Directory (Entra ID) Users with Multi-Factor Authentication
Create duplicate users in both accounts
Share access keys between accounts
Azure Active Directory (Entra ID) Roles with cross-account access
View Explanation
✓ Correct Answer: Azure Active Directory (Entra ID) Roles with cross-account accessExplanation:Azure Active Directory (Entra ID) Roles allow secure cross-account access without sharing long term credentials. Users can assume roles temporarily.