Microsoft Exam AZ-500 Topic 2 Question 52 Discussion

Actual exam question for Microsoft's AZ-500 exam

Question #: 52
Topic #: 2

You have a Microsoft Entra tenant that contains a user named User1.

You plan to enable passwordless authentication for the tenant.

You need to ensure that User1 can enable the combined registration experience. The solution must use the principle of least privilege.

Which role should you assign to User1?

ASecurity Administrator

BGlobal Administrator

CPrivileged Role Administrator

DAuthentication Administrator

Show Suggested Answer

Suggested Answer: D

by Goldie at Dec 22, 2023, 09:39 PM

Limited Time Offer

25%

Off

Get Premium AZ-500 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Yoko

11 months ago

Haha, I bet the exam writers are trying to trip us up with these tricky role-based questions. 'Principle of least privilege' is definitely the keyword here. Can't be giving out Global Admin willy-nilly!

upvoted 0 times

...

Mendy

11 months ago

That's a good point. The Authentication Administrator role would give User1 the necessary permissions to enable the combined registration experience without granting too much access. I think that's the way to go.

upvoted 0 times

...

Vince

11 months ago

Yeah, I agree. We need to look closely at the available roles and their permissions to determine the best fit. I'm leaning towards option D, Authentication Administrator, since that role specifically manages authentication methods.

upvoted 0 times

Casie

11 months ago

Definitely. We want to give User1 the necessary access without granting unnecessary permissions.

upvoted 0 times

...

Willis

11 months ago

I agree. Let's make sure we choose the role that aligns best with the principle of least privilege.

upvoted 0 times

...

Patti

11 months ago

Good point. We should consider all options carefully before making a decision.

upvoted 0 times

...

Melda

11 months ago

True, but Privileged Role Administrator can assign roles. That could be useful for managing authentication methods.

upvoted 0 times

...

Elke

11 months ago

I see your point, but Global Administrator has the highest level of access. Maybe that's necessary for passwordless authentication.

upvoted 0 times

...

Davida

11 months ago

But would Security Administrator be a better fit since it deals with overall security?

upvoted 0 times

...

Crista

11 months ago

I think option D, Authentication Administrator, makes sense. It focuses on authentication methods.

upvoted 0 times

...

Mariko

12 months ago

Hmm, this question seems to be testing our understanding of Azure AD roles and permissions. I think the key is figuring out which role would allow User1 to enable the combined registration experience while following the principle of least privilege.

upvoted 0 times

...