Instiq

3Authentication and Conditional Access

Practice questions →Glossary →
  • 3.1Authentication methods and multifactor authentication

    Understand authentication methods (certificate-based auth, Temporary Access Pass, Microsoft Authenticator, passkeys/FIDO2), tenant-wide MFA settings, self-service password reset (SSPR), Windows Hello for Business, Entra password protection, and Entra Kerberos for hybrid.

  • 3.2Conditional Access

    Understand planning/assigning/controlling Conditional Access policies, session management, device-enforced restrictions, continuous access evaluation (CAE), authentication context, protected actions, and creating from templates.

  • 3.3Managing risk with Microsoft Entra ID Protection

    Understand detecting user risk and sign-in risk with Microsoft Entra ID Protection, risk-based response via Conditional Access, MFA registration campaigns, and monitoring/investigating/remediating risky users/sign-ins/workload identities.

  • 3.4Global Secure Access

    Understand deploying Global Secure Access clients and Microsoft Entra Private Access (ZTNA to internal apps) and Microsoft Entra Internet Access (secure web gateway for internet/SaaS and Microsoft 365).