Correct Answer: Mark the user as confirmed safe in Identity Protection to dismiss the risk and restore access
In Azure AD Identity Protection, you can mark a risky user as 'Confirm user safe', which dismisses all active risk detections for that user and immediately reduces their risk level...
Correct Answer
Mark the user as confirmed safe in Identity Protection to dismiss the risk and restore access
Why This Answer Is Correct
In Azure AD Identity Protection, you can mark a risky user as 'Confirm user safe', which dismisses all active risk detections for that user and immediately reduces their risk level, restoring normal access. Simply dismissing individual detections or excluding the user from policies does not clear the risk state correctly.
This question evaluates your knowledge of Azure Active Directory — a core concept tested in Microsoft Certified: Azure Security Engineer Associate (AZ-500). Understanding Azure Active Directory is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.
A user in your Azure AD tenant is reporting they can sign in successfully but cannot access a specific Azure resource even though they are a member of a group that has the Contributor role on that resource. What should you investigate first?
Your organization requires that all Azure AD global administrator accounts use phishing-resistant MFA only. You must enforce this without creating per-user MFA settings and in a way that applies to all current and future global admins. What is the recommended approach?
You need to allow an external vendor to access a specific Azure storage account for 30 days. The vendor uses a different Azure AD tenant. You want to avoid creating guest accounts and leverage their existing corporate identity. Which solution should you use?
Your organization wants to enforce that no permanent Global Administrator assignments exist in Azure AD. All Global Admin access must be time-bound, require approval, and trigger a notification. Which Azure AD feature provides these controls?