Free Microsoft Azure AZ-900 Actual Exam Questions - Question 8 Discussion

C seems off because not all Azure services strictly require multi-factor authentication by default. That’s usually optional or configurable, so I’d go with No for that one.

B is definitely No since Azure AD supports more than just SAML.

I’d say B is a No because Azure AD supports multiple authentication methods, not just SAML. Saying it only supports SAML leaves out OAuth and OpenID Connect, so that’s definitely not fully true. Also, for C, I think it’s tricky—while some Azure services do support dedicated hardware security modules, it’s not across the board, so marking it No makes sense. The question seems to be asking about general truths, not exceptions. So overall, A should be Yes, B and C No, and D probably Yes since encryption at rest is pretty much standard now across the board.

I agree with marking A as Yes because RBAC is core to Azure security. I’d also say C is No since some features mentioned don’t apply universally across all services, which makes it less accurate.

I’m considering A as Yes because role-based access control is fundamental in Azure. D feels like a No since encryption at rest is standard, not optional, so that matches your thought too.

I’m thinking B should be Yes because Azure generally enforces MFA for admins, but D feels like a No since encryption at rest usually comes enabled by default, not optional. That might be the trick here.

I’d say A and B are safe Yes choices since those match basic Azure features. C and D seem off, especially D, since the encryption part doesn’t really fit how Azure handles that by default.

I agree C is definitely No because it doesn’t align with how Azure services handle that feature. A and B seem straightforward Yes, and D feels more like a No based on recent changes.

D looks like No based on the latest Azure compliance updates I’ve seen.

Looks like a mix of true and false, C is definitely No.