Managing Authentication

Question 1

You need to ensure that custom code running within a Microsoft Azure virtual machine has access to read blobs in an Azure storage account. What should you do first?

• Embed storage account credentials within the custom code
• Assign storage account permissions to the virtual machine
• Run the custom code in a Docker container
• Configure a managed identity for the virtual machine

Answer 1

Assign storage account permissions to the virtual machine

Question 2

Where are hashed Linux user passwords stored by default?

• /etc/passwd
• /etc/
• /etc/shadow
• /etc/hosts

Answer 2

/etc/shadow

Question 3

You have configured your organization’s identity federation server to include user locations and dates of birth to be packaged within authentication tokens. What have you configured?

• Claim
• PHI
• SAML
• SSO

Answer 3

Claim

Question 4

How do AWS IAM users receive permissions to AWS resources?

• AWS templates
• Amazon Echo
• AWS Policies
• Amazon Macie

Answer 4

AWS Policies

Question 5

Which Azure AD user property is used to specify the sign-in name?

• SLA
• PHI
• UPN
• PCI

Answer 5

UPN

Question 6

Which AWS MFA user options are valid?

• Network access control
• Hardware token
• Authenticator app
• PKI certificate

Answer 6

Hardware token
Authenticator app

Question 7

Which biometric authentication options can be configured on a Windows client device?

• Facial recognition
• PKI certificate
• Fingerprint scan
• Smartcard

Answer 7

Facial recognition
Fingerprint scan

Question 8

You need to deploy password policy settings to all Active Directory-joined devices. What should you do?

• Configure password settings in a domain-level GPO
• Configure password settings in an OU-level GPO
• Configure password settings on each client device
• Configure password settings in a container-level GPO

Answer 8

Configure password settings in a domain-level GPO