Microsoft Entra FAQ: Essential Q&A for Interviews – 3

Hello All,

Greetings for the day!!!

Continue to share Microsoft Entra questions and answers. These will help to prepare interviews, certifications.

Earlier Microsoft Entra questions and answers articles

• Microsoft Entra FAQ: Essential Q&A for Interviews – https://knowledge-junction.in/2025/01/06/entra-interview-preparation/
• Microsoft Entra FAQ: Essential Q&A for Interviews – 2 – https://knowledge-junction.in/2025/01/26/ms-entra-faq-interviews-2/

If you want details for any concept/feature of Microsoft Entra, please specify in comment box. I’ll try to have an article for the same.

Q 1. What is an identity provider (IdP)

• An identity provider (IdP) is a system that creates, manages and stores digital identities.
• Example – Microsoft Entra ID
• Most common components of Identity Provider are
  • A repository of user identities
  • An authentication system
  • Security protocols that defend against intrusion
  • Someone we trust
• We have detailed article on Identity Provider and Modern Authentication. Microsoft 365 / Azure – Exploring concept – Identity Provider and Modern Authentication – https://knowledge-junction.in/2022/08/20/microsoft-365-azure-exploring-concept-identity-provider-and-modern-authentication/

Q 2. What is Microsoft Entra multifactor authentication?

• Microsoft Entra multifactor authentication (MFA) supplies added security for identities by requiring two or more elements for full authentication.
• Using Microsoft Entra multifactor authentication improves identity security by limiting the impact of password exposure.
• We have detailed articles on MFA.
  • Microsoft 365 / Azure – Where to start with Security implementation for my Tenant – part 1 – Is MFA enabled? – https://knowledge-junction.in/2022/11/24/microsoft-365-azure-where-to-start-with-security-implementation-for-my-tenant-part-1-is-mfa-enabled/

Q 3. What are the Authentication methods supported?

Method	Description
Mobile App Verification code	A mobile authentication app like the Microsoft Authenticator app can be used to retrieve an OATH verification code. Which is then entered into the sign-in interface. This code is changed every 30 seconds and the app works even if connectivity is limited. This approach doesn’t work in China on Android devices.
Mobile app notification	Azure can send a push notification to a mobile authentication app like the Microsoft Authenticator. The user can select the push notification and verify the sign-in.
Call to a phone	Azure can call a supplied phone number. The user then approves the authentication using the keypad. This method is preferred for backups.
FIDO2 security key	FIDO2 security keys are an unphishable standards-based passwordless authentication method. These keys are typically USB devices, but could also use Bluetooth or NFC.
Windows Hello for Business	Windows Hello for Business replaces passwords with strong two-factor authentication on devices. This authentication consists of a type of user credential that is tied to a device. And uses a Biometric or PIN.

Q 4. How to restrict user from registering an applications?

• We can restrict user from registering new application from Microsoft Entra admin center.
• We have detailed article for the same. Exploring Microsoft Entra – How to restrict users from registering an application – https://knowledge-junction.in/2025/01/08/msentra-restrict-users-from-registering-application/

Q 5. What is access package?

• A bundle of resources that a team or project needs and is governed with policies.
• An access package is always contained in a catalog.
• We would create a new access package for a scenario in which users need to request access.
• Access packages are used to govern access for your internal employees and users outside your organization.

Q 6. What is identity and access management (IAM)?

• Identity and access management ensures that the right people, machines, and software components get access to the right resources.
• First, the person, machine, or software component proves they’re who or what they claim to be.
• Then, the person, machine, or software component is allowed or denied access to or use of certain resources.

Q 7. How to get items which are trending around me

• We have an option of Microsoft Graph API

https://graph.microsoft.com/v1.0/me/insights/trending

Q 8. What is OATH?

• OATH (Open Authentication) is an open standard that specifies how time-based, one-time password (TOTP) codes are generated.
• One-time password codes can be used to authenticate a user.
• OATH TOTP is implemented using either software or hardware to generate the codes.

Q 9. Describe self-service password reset (SSPR)

• Self-service password reset (SSPR) is a feature of Microsoft Entra ID.
• This feature allows us to change or reset their password, without administrator or help desk involvement. 

Q 10. How to view my owned applications / apps?

• We can view all my owned applications from Microsoft Entra admin center.
• We have detailed article how to navigate Microsoft Entra admin center. Small Tips and Tricks – Microsoft Entra admin center – How to navigate – Microsoft Entra admin center – https://knowledge-junction.in/2022/12/19/small-tips-and-tricks-microsoft-entra-admin-center-how-to-navigate-microsoft-entra-admin-center/
• From Microsoft Entra admin center Home (https://entra.microsoft.com/#home), from left pane, expand the link “Applications“.

• Navigate to “App registrations“. https://entra.microsoft.com/#view/Microsoft_AAD_RegisteredApps/ApplicationsListBlade/quickStartType~/null/sourceType/Microsoft_AAD_IAM
• We will be redirected to “App registrations” page.
• On “App registration” page, by default “Owned applications” tab is selected.
• Under “Owned applications” we will see all applications where we are the owner.

REFERENCES

• Microsoft Entra FAQ: Essential Q&A for Interviews – https://knowledge-junction.in/2025/01/06/entra-interview-preparation/
• Exploring Microsoft Entra – How to restrict users from registering an application – https://knowledge-junction.in/2025/01/08/msentra-restrict-users-from-registering-application/
• Small Tips and Tricks – Microsoft Entra admin center – How to navigate – Microsoft Entra admin center – https://knowledge-junction.in/2022/12/19/small-tips-and-tricks-microsoft-entra-admin-center-how-to-navigate-microsoft-entra-admin-center/
• Microsoft 365 / Azure – Where to start with Security implementation for my Tenant – part 1 – Is MFA enabled? – https://knowledge-junction.in/2022/11/24/microsoft-365-azure-where-to-start-with-security-implementation-for-my-tenant-part-1-is-mfa-enabled/
• Microsoft 365 / Azure – Exploring concept – Identity Provider and Modern Authentication – https://knowledge-junction.in/2022/08/20/microsoft-365-azure-exploring-concept-identity-provider-and-modern-authentication/
• Facebook – How to enable two-factor authentication – https://knowledge-junction.in/2023/04/22/facebook-how-to-enable-two-factor-authentication/

Thank you for reading. Have a great time ahead! LIFE IS BEAUTIFUL 🙂