Continue your lesson
Trace the identity, credential, token, assignment, policy decision, resource, and audit record for each access request.
Block 1 of 4Compare Microsoft Entra sign-in log · Microsoft Entra audit log
Current · 12 min
Compare Microsoft Entra sign-in log · Microsoft Entra audit log
Optional concept notes
Microsoft Entra sign-in log
Records authentication attempts outcomes policies device details and risk context.
Microsoft Entra audit log
Records directory and identity-management changes with actor target and result.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 2 of 4Compare Microsoft Entra diagnostic setting · Log Analytics workspace · Microsoft Entra workbook
18 min
Compare Microsoft Entra diagnostic setting · Log Analytics workspace · Microsoft Entra workbook
Optional concept notes
Microsoft Entra workbook
Visualizes identity data through reusable Azure Monitor workbook queries and views.
Microsoft Entra diagnostic setting
Routes selected identity logs to supported destinations for retention and analysis.
Log Analytics workspace
Stores exported identity logs and supports KQL investigation and reporting.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 3 of 4Compare Identity Secure Score · Microsoft Entra usage and insights
15 min
Compare Identity Secure Score · Microsoft Entra usage and insights
Optional concept notes
Identity Secure Score
Measures identity security posture against Microsoft recommendations and tracks improvement actions.
Microsoft Entra usage and insights
Summarizes application sign-in activity and authentication usage patterns.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Block 4 of 4Understand Provisioning log
10 min
Understand Provisioning log
Optional concept notes
Provisioning log
Records automated identity provisioning actions skips and failures for connected systems.
Complete one provider lesson, then answer four related questions. That is enough for today; more practice is optional.
Your lesson stays open here while the provider opens in another tab. Choose one source; the notes above are optional.
Practice the reasoning here
Use a fictional tenant. Draw one access path, apply least privilege, test an exception, and name the logs that would confirm the result.
- State the expected result before changing or testing anything.
- Name the observation, command, log, or report that would confirm it.
- Explain why the closest alternative does not fit the same requirement.
Check the whole objective
This unlocks objective 4.4 for recall. The latest checkpoint needs 70% or higher; a lower result puts the lesson back near the front of your timeline.