Questions

As you work through this book, it’s useful to reflect on what you’ve learned and challenge yourself with questions. Here’s some on what we covered in this chapter:

1. Which of the following Azure AD groups isn’t provisioned as part of an MDI deployment?
   1. Azure ATP <tenant name> Administrators
   2. Azure ATP <tenant name> Viewers
   3. Azure ATP <tenant name> Responders
   4. Azure ATP <tenant name> Viewers
2. True or false: this book encouraged the use of PIM for Groups to manage MDI administrative access, but this is restricted to the Azure AD Premium P2 license.
   1. True
   2. False
3. Why are exclusions by detection rule preferred to global excluded entities, where possible?
   1. Exclusions by detection rule reduce blind spots in detections, compared to global excluded entities.
   2. Global exclusions do not support domains.
   3. Global exclusions are more difficult to set up.
4. Which of these isn’t a type of activity you’d find in an MDI security...