Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Drag & Drop Scenario
Read the scenario requirements and decide your answer. Click Check Answer below to see the marked solution.
Hotspot Solution:
For brute force password attacks: Extranet Smart Lockout (ESL) → Detects and blocks repeated failed sign-in attempts from external sources, protecting against brute force attacks. For leaked credentials: Password hash synchronization → Required for Azure AD to detect compromised credentials (via Identity Protection). Without hash sync, Azure AD cannot compare passwords against known leaked credentials.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
For brute force password attacks: Extranet Smart Lockout (ESL) → Detects and blocks repeated failed sign-in attempts from external sources, protecting against brute force attacks. For leaked credentials: Password hash synchronization → Required for Azure AD to detect compromised credentials (via Identity Protection). Without hash sync, Azure AD cannot compare passwords against known leaked credentials.
• Brute force password attacks → Smart Lockout • Leaked credentials → Identity Protection (risk‑based Conditional Access)
Box1: Azure AD Password Protection Box2: Password hash syncronization As Azure AD Password Protection support "Custom smart lockout" Customize your smart lockout threshold (number of failures until the first lockout) and duration (how long the lockout period lasts).