AZ 104 Final Exam Questions and Answers 2022 Update
What is the difference between Identity and Account?
An identity is an object that can be authenticated. An Account is an identity plus data such as first name, las
...
AZ 104 Final Exam Questions and Answers 2022 Update
What is the difference between Identity and Account?
An identity is an object that can be authenticated. An Account is an identity plus data such as first name, last name and department.
What is azure tenant?
A dedicated and trusted instance of Azure AD that is automatically created when an organization signs up for a Microsoft Cloud Service.
What is Azure AD directory?
Each Azure tenant has a dedicated and trusted Azure AD Directory. They are automatically created when your organization signs up for a Microsoft cloud subscription.
What is a User Subscription?
Used to pay for Azure Services
What is AD DS?
Active Directory Domain Services
What is Azure AD?
Free or Paid Services running Microsoft Cloud.
What is Azure AD DS?
Cloud managed highly available AD DS as a service.
What are the four versions of Azure Active Directory?
Free, M365, Premium1 and Premium 2.
What two features does Premium P2 edition offer that Premium P1 doesn't?
Identity Protection and Identity Governance
Which Azure Active Directory Editions provide Dynamic Groups?
M365/Premium 1 and Premium 2.
Do GPOs work in Azure Active Directory?
No because it is flat and not hierarchial like AD DS.
Is AD DS encrypted by default?
No.
Azure Active Directory is encrypted by default.
What is a user account in AD used for?
authentication and authorization
What is authentication?
Do you have a username and password.
What is authorization?
What are you allowed to do?
What are the three types of accounts?
1. cloud
2. directory-synchronized
3. guest
How many days can a deleted user be restored in?
30 days
How can you add bulk user accounts?
1. Bulk upload users via Portal using csv template
2. Bulk upload users via PowerShell New-AzADUser
What are the group types?
Security Groups
Office 365 groups
What are the 3 group assignment types?
1. Assigned
2. Dynamic User
3. Dynamic Device (Security groups only)
True or False: Each Azure AD is a fully independent resource.
True
There is no parent-child relationship between tenants
Where will azure ad directories get created?
1. Intune
2. Microsoft 365
3. Azure Portal sign-up links
Can subscriptions be moved between directories?
Yes
What option allows password changes to be done between on-premise and Azure AD?
Password write-back
What is azure ad connector health?
It monitors the sync between on-prem ad and cloud.
What are the authentication options for Azure AD Join?
OAuth/Open ID connect
What are the authentication methods for Azure AD Domain Services?
Kerberos, NTLM
How is management done for Azure AD Join?
Mobile Device Management (MDM) software like Intune.
How is management done for Azure AD Domain Services computers?
Group policy
What are the network consideration for Azure AD Join devices?
Works over the Internet
What are the networking considerations for Azure AD Domain Services?
- Requires machines to be on the same virtual network as the managed domain
- can use virtual network peering or site-to-site VPNs to extend connectivity.
MFA - what is something you know?
your password
MFA - what is something you have?
hardware key or cell phone
[Show More]