Microsoft Azure Architect Design (AZ-304) Practice Test

Which feature can be used to manage access to Azure resources utilizing conditional parameters?

1. Azure Active Directory (AD) roles

2. Conditional Access Policies

3. Network Security Groups (NSGs)

4. Azure Firewall

The correct answer is: Conditional Access Policies

Conditional Access Policies are a crucial feature in Azure that allow you to manage access to Azure resources based on specific conditions or parameters. This capability provides a way to enforce security requirements by evaluating a variety of factors such as user location, device compliance status, and the risk level associated with a user or operation. When these parameters are met, you can grant or block access, ensuring that only authorized users accessing resources under secure conditions are permitted. For example, you can set up a policy that requires multi-factor authentication (MFA) for users accessing the Azure portal from a non-corporate network. This adaptive approach enhances the security posture of Azure environments. Other options serve different purposes. Azure Active Directory roles define permissions at a broader level but do not include the condition-based controls offered by conditional access. Network Security Groups focus on controlling inbound and outbound traffic to Azure resources, while Azure Firewall provides a security barrier for managing and monitoring traffic flows but does not offer the granular access management based on conditional parameters like conditional access policies do.