Microsoft 365 Certified Endpoint Administrator (MD-102) Practice Test

Which service can be used for user account and access management in Microsoft 365?

1. Active Directory Domain Services (AD DS)

2. Azure Active Directory (Azure AD)

3. Windows Server Update Services (WSUS)

4. System Center Configuration Manager (SCCM)

The correct answer is: Azure Active Directory (Azure AD)

Azure Active Directory (Azure AD) serves as the primary service for user account and access management in Microsoft 365. It provides a comprehensive set of identity management capabilities, allowing organizations to create and manage user accounts, enforce access policies, and facilitate single sign-on (SSO) for various applications. With Azure AD, users can access Microsoft 365 apps and services through a unified authentication platform, which enhances security and user experience. Additionally, Azure AD supports features such as multi-factor authentication (MFA), conditional access policies, and self-service password reset, all of which are crucial for managing user access securely in a cloud-based environment. This makes Azure AD a vital component in ensuring that organizations can manage their users effectively, maintain security compliance, and streamline access to resources. The other services mentioned, while they play important roles within IT environments, do not focus on user account and access management in the context of Microsoft 365. Active Directory Domain Services (AD DS) is primarily used in on-premises environments for directory services but is not optimized for cloud-based identity management. Windows Server Update Services (WSUS) is designed for managing updates and patches for Windows operating systems, and System Center Configuration Manager (SCCM) focuses on system management rather than user