Is it possible to disable an individual endpoint without deleting it from the Traffic Manager profile?

Yes, it is possible.

Are managed identities credentials-free?

Yes, managed identities are credential-free.

What is the purpose of conditional access policies in Azure AD?

Fine-grained access control, Enhanced security, Protection of sensitive data etc.

How does role inheritance work in Azure RBAC?

Parent-child hierarchy or Top-Down approach.

Can a Contributor delete an entire resource group in Azure?

Yes, a user with the Contributor role can delete an entire resource group