Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Azure AZ-104 > Azure AD > Flashcards

Azure AD Flashcards

1
Q

What type of user accounts exist only in Azure AD. These are typically used by small organizations that do not have on-premises servers or do not use AD DS to manage local identities.

A

Cloud-only identity User Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What type of user accounts originate in an on-premises AD DS and have a copy in the Azure AD tenant of a Microsoft 365 subscription.

A

Hybrid identity User Accounts

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

In a Hybrid Identity Azure AD setup, most changes you make only sync in which direction?

A

Most on premise changes are synced to the Azure AD, any changes made directly in Azure will not get synced to the on premise AD.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

WHAT provides the ongoing account synchronization? It runs on an on-premises server, checks for changes in the AD DS, and forwards those changes to Azure AD.

A

Azure AD Connect

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What is Azure AD B2B?

A

It’s a feature within External Identities that lets you invite guest users to collaborate with your organization..

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What 4 Identity providers are supported for B2B external collaboration?

A

Microsoft Account
Azure Active Directory
Google Federation
SAML/WS-Fed identity provider (Direct Federation)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What PowerShell module is needed to connect to Azure AD?

A

AzureAD Module

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What two PowerShell commands are needed to connect to your Azure AD environment?

A

Install-Module -Name AzureAD

Connect-AzureAD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What type of file is needed when using the Bulk Create User feature in Azure AD portal?

A

Comma Separated Value file (.csv)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What three Bulk User Operations are available in the Azure AD portal?

A

Bulk Create
Bulk Invite
Bulk Delete

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What are the 2 Azure AD group types??

A

Security and Microsoft 365 Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the different Azure AD group membership types?

A

Assigned
Dynamic User
Dynamic Device

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What’s the differences between Assigned and Dynamic membership types?

A

Assigned - Manually add specific users to be members of the group.

Dynamic - Setup membership rules that will auto add and remove members/devices from the group.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

What two PowerShell cmdlets are used to create and add members to Azure AD Groups?

A

New-AzureADGroup

Add-AzureADGroupMember

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What PowerShell cmdlet is used to create a new Azure AD User?

A

New-AzureADUser

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is an Azure AD user and group container analogous to organizational units (OU) in a local Active Directory?

A

Azure AD Administrator Units

17
Q

What’s the 2 primary reasons to utilize Administrative Units in an enviroment?

A

Logically organize your Azure AD users and groups

Delegate administrative permissions such as password resets and enforcing least-privileage administration.

18
Q

The goal of WHAT supports Bring Your Own Device (BYOD) or mobile device scenarios, allowing devices to be registered to Azure AD without requiring an organizational account to sign in to the device?

A

Azure AD Registered Devices

19
Q

Administrators can secure and further control Azure AD registered devices by using WHAT?

A

Mobile Device Management (MDM) tools like Microsoft Intune

20
Q

The goal of WHAT is to restrict devices only joined to Azure AD, requiring an organizational account to sign in to the device for access?

A

Azure AD Joined Devices

21
Q

What operating systems are supported for Azure AD Join?

A 
Windows 10 (Not Home Edition)
Win Server 2019 running in Azure (Not Server Core)
22
Q

What operating systems are supported for Azure AD registered devices??

A

Windows 10
iOS
Android
MacOS

23
Q

If your environment has an on-premises AD footprint, and you also want to benefit from the capabilities provided by Azure Active Directory, you can implement WHAT type of joined devices?

A

Hybrid Azure AD Joined Devices

24
Q

What operating systems are supported for Hybrid Azure AD Joined Devices?

A

Windows 10, 8.1, and 7

Windows Server 2008/R2, 2012/R2, 2016, and 2019

25
Q

When an Azure VM is joined to the Azure AD, to allow a user to log in to the VM over RDP, you must first assign them one of WHAT roles.

A

Virtual Machine Administrator Login

Virtual Machine User Login

26
Q

The Virtual Machine Administrator Login and Virtual Machine User Login roles use dataActions and thus cannot be assigned at the management group scope. Currently, these roles can only be assigned WHERE?

A

Subscription, Resource Group, or Resource Scope.

27
Q

What is Azure Enterprise State Roaming (ESR)?

A

Provides the ability to securely synchronize their user settings and application settings data to the cloud. Gives users a unified experience across their Windows devices and reduces the time needed for configuring a new device.

28
Q

What five services are included in Azure Enpoint Manager?

A 
Microsoft Intune
Configuration Manager
Desktop Analytics
Co-management
Windows Autopilot
29
Q

WHAT is a cloud-based service that focuses on mobile device management (MDM) and mobile application management (MAM).

A

Microsoft Intune

30
Q

Microsoft suggests that you use WHAT as a way to onboard or enforce Azure MFA?

A

Conditional Access Policy

31
Q

WHAT is the tool used by Azure Active Directory to bring signals together, to make decisions, and enforce organizational policies?

A

Conditional Access Policies

32
Q

Conditional Access policies are enforced after WHAT is completed?

A

First-factor Authentication

33
Q

What are some common signals Condition Access can take into account when making a policy decision?

A 
User or group membership 
IP Location information 
Device 
Application 
Real-time and calculated risk detection 
Microsoft Cloud App Security (MCAS)
34
Q

WHA is an Azure Active Directory (AD) feature that enables users to reset their passwords without contacting IT staff for help?

A

Self-Service Password Reset (SSPR)

35
Q

WHAT can be used to synchronize password changes in Azure AD back to your on-premises AD DS environment?

A

Azure Password Writeback

Azure AZ-104 (14 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions