Section 5: Manage Identities
Manage Identities (15-20%)
Manage Azure Active Directory (AD)
Add custom domains; Azure AD join; configure self-service password reset; manage multiple directories;
Manage Azure AD objects (users, groups, and devices)
Create users and groups; manage user and group properties; manage device settings; perform bulk user updates; manage guest accounts
Implement and manage hybrid identities
Install Azure AD Connect, including password hash and pass-through synchronization; use Azure AD Connect to configure federation with on-premises Active Directory Domain Services (AD DS); manage Azure AD Connect; manage password sync and password writeback
Implement and manage multi-factor authentication (MFA)
Configure user accounts for MFA, enable MFA by using bulk update, configure fraud alerts, configure bypass options, configure Trusted IPs, configure verification methods