Home › Azure AZ-500 › cloudcomputing › az500identityaccess › Which Azure / Microsoft Entra feature lets an ad…
Which Azure / Microsoft Entra feature lets an admin enforce 'block sign-in from countries outside India and the US' as a Conditional Access rule?
ASharing the global admin credentials with anyone who travels
BHardcoded IP allow-lists in every app
CDisabling sign-in entirely
DA named location (with geo-IP definitions) referenced as a condition in a Conditional Access policy
Answer & Solution
Correct answer: D. A named location (with geo-IP definitions) referenced as a condition in a Conditional Access policy
Named locations + Conditional Access enforce geo restrictions (per AZ-500 §1 Conditional Access). The others are anti-patterns.
Related questions
Which Microsoft Entra ID feature lets a security engineer detect risky user behaviour (impWhich Microsoft Entra capability lets an admin enforce per-user MFA via a Conditional AcceWhich Microsoft Entra ID feature lets a developer register an app and obtain a CLIENT ID aWhich Microsoft Entra ID feature lets an admin enforce 'every privileged role activation mWhich Microsoft Entra ID feature lets an admin define a custom role with EXACTLY the actioWhich Microsoft Entra ID feature should an admin use to require user CONSENT to specific OWhich Azure resource feature lets an Azure VM / App Service / Function App authenticate toWhich Microsoft Entra ID construct represents the identity of a non-human workload (an app