Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 4 question 32 discussion

Actual exam question from Microsoft's AZ-305

Question #: 32
Topic #: 4

You have an Azure Active Directory (Azure AD) tenant that syncs with an on-premises Active Directory domain.
Your company has a line-of-business (LOB) application that was developed internally.
You need to implement SAML single sign-on (SSO) and enforce multi-factor authentication (MFA) when users attempt to access the application from an unknown location.
Which two features should you include in the solution? Each correct answer presents part of the solution.
NOTE: Each correct selection is worth one point.

A. Azure AD Privileged Identity Management (PIM)
B. Azure Application Gateway
C. Azure AD enterprise applications
D. Azure AD Identity Protection
E. Conditional Access policies

Show Suggested Answer

Suggested Answer: CE 🗳️

by bootless at Sept. 1, 2022, 7:20 p.m.

Comments

Submit Cancel

bootless

Highly Voted 2 years, 3 months ago

Selected Answer: CE

Given answer is WRONG. Correct ist Azure AD enterprise applications and Conditional Access Enterprise App for SSO Conditional Access for MFA

upvoted 90 times

icklenutter

2 years, 3 months ago

Agree, Should be CE

upvoted 13 times

ServerBrain

1 year, 11 months ago

I can't agree with you more..

upvoted 4 times

dc4c4dc

6 months ago

I can agree with you more...

upvoted 3 times

...

DeeSeeEss

Highly Voted 1 year, 9 months ago

Moderator, it's been 5 months with the incorrect answer and reasoning posted. Can we please get this updated for ease of use? The correct answer is obviously C,E.

upvoted 25 times

...

Thanveer

Most Recent 1 week ago

Selected Answer: CE

Agree with C,E

upvoted 1 times

...

SeMo0o0o0o

3 weeks, 1 day ago

Selected Answer: CE

C & E are correct

upvoted 1 times

...

Lazylinux

7 months, 2 weeks ago

Selected Answer: CE

Agree with CE for any SSO use Enterprise App Conditional Access for MFA as it is option to configure in there

upvoted 2 times

...

ahmedkmj

8 months, 3 weeks ago

Selected Answer: CE

10000% CE

upvoted 2 times

...

dejedi

8 months, 4 weeks ago

Selected Answer: CE

I Agree with C / E

upvoted 1 times

...

SDiwan

9 months, 2 weeks ago

Selected Answer: CE

Create an enterprise app in Azure AD for SSO Conditional access for MFA

upvoted 1 times

...

Som_triv

1 year, 2 months ago

Enforce multi-factor authentication (MFA) - This can be done either by using the Identity Protection - using signed-in risk action or using the Conditional Access Policy (CAP). The only difference is that CAP needs to be applied per application and Identity Protection is for the overall user login to any of your Enterprise applications. As the problem in hand talk about a specific Application, CAP may be more appropriate answer. C and E are correct.

upvoted 3 times

josola

2 months, 2 weeks ago

The answers are correct but the reasoning of AIP (Azure Identity Protection) are not accurate. Yes, AIP provides the signals (i.e. high risk sign-in, risky user, etc.) BUT AIP doesn't allow configuration of MFA or enforcing. That's only Conditional Access.

upvoted 1 times

...

daniloaclima

1 year, 5 months ago

Selected Answer: CE

"C" and "E" is correct!

upvoted 1 times

...

NotMeAnyWay

1 year, 7 months ago

Selected Answer: CE

C. Azure AD enterprise applications E. Conditional Access policies C. Azure AD enterprise applications: You need to configure the LOB application as an enterprise application in Azure AD. This will allow you to configure SAML-based SSO for the application, enabling users to sign in using their Azure AD credentials. E. Conditional Access policies: You can create a Conditional Access policy in Azure AD to enforce MFA when users attempt to access the application from an unknown location. Conditional Access policies allow you to set specific conditions, such as location or device state, and apply security requirements, like MFA, when those conditions are met.

upvoted 5 times

...