Security, identity & compliance
33 practice questions with explanations — 15 free to try
PassNova has 33 Microsoft Azure Fundamentals (AZ-900) practice questions on Security, identity & compliance, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Security, identity & compliance: example questions & answers
3 worked examples with answers and explanations below. Try 15 Microsoft Azure Fundamentals (AZ-900) questions free in the browser; the full 33-question Security, identity & compliance bank is part of PassNova Premium.
What is Microsoft Entra ID (formerly Azure Active Directory)?
- AA storage redundancy option that copies data between availability zones
- BA cloud-based identity and access management service✓
- CA virtual networking service that provides private address space
- DA relational database service
Answer: Microsoft Entra ID is a cloud-based identity and access management service that handles sign-in and access to resources and applications.
What is the difference between authentication and authorization?
- AAuthorization always happens before authentication in every single sign-in sequence
- BAuthentication proves who you are; authorization determines what you can access✓
- CThey are identical concepts
- DAuthentication grants access to resources, while authorization is what proves a user's identity
Answer: Authentication (AuthN) verifies a user's identity, while authorization (AuthZ) determines what that authenticated identity is permitted to do.
What does Multi-Factor Authentication (MFA) require?
- AAccess only from the corporate network, with no additional identity check required
- BTwo or more verification factors, such as a password plus a phone prompt✓
- CA single strong password
- DA biometric scan only
Answer: MFA requires two or more independent verification factors, such as something you know, something you have, and something you are, increasing security.