Microsoft Entra FAQ: Essential Q&A for Interviews

Hello All,

Greetings for the day!!!

Sharing Microsoft Entra questions and answers. These will help to prepare interviews, certifications.

If you want details for any concept/feature of Microsoft Entra, please specify in comment box. I’ll try to have an article for the same.

Q 1. What is Microsoft Entra?

• Microsoft Entra is a family of identity and network access products.
• The Microsoft Entra product family covers four maturity stages of secure end-to-end access for any trustworthy identity. These stages include
  • establishing Zero Trust access controls,
  • securing access for employees, customers, partners, and any cloud environment.

Q 2. What is Zero Trust?

• Zero Trust is a security strategy.
• Zero Trust is an approach in designing and implementing the following set of security principles.
  • Verify explicitly – Always authenticate and authorize based on all available data points.
  • Use least privilege access – Limit user access with Just-In-Time and Just-Enough-Access (JIT/JEA), risk-based adaptive policies, and data protection.
  • Assume breach – Verify end-to-end encryption and use analytics to get visibility, drive threat detection, and improve defenses.

Q 3. What is Microsoft Entra Role?

• A role is a collection of permissions. 
• To grant access to users in Microsoft Entra ID, we assign Microsoft Entra roles.

Q 4. What is Global banned password list?

• “Global banned password” list is list maintained by Microsoft’s Microsoft Entra Identity Protection team to maintain weak passwords.
• Microsoft’s Microsoft Entra Identity Protection team constantly analyzes Microsoft Entra security telemetry data.
• Team looks for commonly used weak or compromised passwords. 
• The team conducts an analysis. They look for base terms that users often use. These terms are the basis for weak passwords.
• When the team finds weak terms, they add them to the global banned password list.

Q 5, How to get all Entra roles?

• One choice is to use Microsoft Graph PowerShell CMDLET

Get-MgRoleManagementDirectoryRoleDefinition

• From Microsoft 365 admin center. We have detailed article for the same. Exporting Microsoft 365 Admin Roles: A Step-by-Step Guide – https://knowledge-junction.in/2024/12/02/exporting-microsoft-365-admin-roles-a-step-by-step-guide/

Q 6. What roles are needed to access MICROSOFT ENTRA PASSWORD PROTECTION?

• Global Administrator
• Security Administrator
• or Privileged Role Administrator

Q 7. What is Custom banned password list ?

• We can use the “Custom banned password list.” to add our own entries on top of terms from the “Global banned password” list.
• Microsoft Entra ID limits the custom banned password list to a maximum of 1,000 terms. 

Q 8. How to enable “Custom banned password list”?

• We can enable / configure “Custom banned password list” from Microsoft Entra admin center.
• Please refer our detailed article for the same. Microsoft Entra – Microsoft Entra Password Protection – How to enable / configure “Custom Banned Passwords” – https://knowledge-junction.in/2025/01/04/msentra-password-protection-how-to-enable-custom-banned-passwords/

Q 9. What role “Authentication Policy Administrator” can perform?

• Configures the
  • authentication methods policy
  • tenant-wide MFA settings
• Manage Password Protection settings
  • smart lockout configurations
  • updating the custom banned passwords list.
• Manage MFA settings in the legacy MFA management portal.
• Create and manage verifiable credentials.
• Create and manage Azure support tickets.

Q 10. How to know which roles and permissions are privileged?

• We have an option either from
  • Admin center
  • PowerShell
  • Graph API

REFERENCES

• Microsoft Graph PowerShell tutorial – https://knowledge-junction.in/2024/01/25/microsoft-365-microsoft-graph-powershell-way-to-go-now/

Thanks for reading. HAPPY LEARNING !

Stay tuned for more set of questions and preparation.

LIFE IS BEAUTIFUL 🙂