Azure AD Basics
What does AD stand for in Azure AD?
Active Directory
What does SSO stand for?
Single Sign-On
What does Azure AD DS stand for?
Azure Active Directory Domain Services
What can Azure AD groups be used for?
Assigning permissions/resources to multiple users at once
One benefit of using Azure AD for users.
Single sign-on, no multiple passwords
Is Azure AD a cloud-based or on-premises service?
Cloud-based
What does SSO allow users to do?
Sign in to multiple apps with one set of credentials
Name one feature of Azure AD DS.
Domain Join, Group Policy, LDAP, Kerberos
What is RBAC?
Role-Based Access Control
One benefit of using Azure AD for organizations.
Centralized management, increased security, reduced risk
What is Microsoft’s cloud-based authentication service called?
Azure Active Directory
What is IDaaS?
Identity as a Service — third-party cloud identity management
Which connector allows Azure AD to manage on-premises computer objects?
Intune Connector for AD
Give an example of when you’d use RBAC
Assigning admin rights to IT staff without giving global admin
How does Azure AD eliminate the need for apps to store credentials?
Apps rely on Azure AD for authentication instead of storing passwords themselves
What tool can integrate on-premises AD with Azure AD?
Azure AD Connect
Name a protocol that Azure AD uses for authentication instead of LDAP?
HTTP/SAML/OpenID/OAuth 2.0
How do applications communicate with Azure AD to authenticate users?
Through HTTP requests to Azure’s user database
What’s one benefit of using groups in Azure AD?
Simplifies management of users and permissions
What advanced protections does Microsoft provide for Azure AD?
Threat detection, encryption, multi-factor authentication, conditional access
Name one difference between Azure AD and traditional Active Directory.
Azure AD uses HTTP/SAML/OpenID/OAuth instead of LDAP; no traditional domain controllers
Why does centralizing user data in Azure AD improve security?
Fewer places store data, reducing attack surface
What’s one way Azure AD can be managed?
Graphical web interface or PowerShell
What’s the difference between a security group and a Microsoft 365 group?
Security group = access to resources; Microsoft 365 group = collaboration tools like Teams, Outlook, SharePoint
Why might applications still be less secure than Azure AD itself?
Apps may not have the same advanced security resources