Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

Microsoft 365 Security Administration (MS-500) > Create, Configure, and Manage Identities > Flashcards

Create, Configure, and Manage Identities Flashcards

1
Q

Access to ________ workloads is controlled using two methods:

  1. Provide a definitive identity for each user for every service.
  2. Ensuring just enough access to do job.
A

Cloud-based Workloads

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What is Microsoft’s cloud-based identity and management service?

A

Azure Active Directory (Azure AD)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

After authentication, what does Azure use to determine what resources the user can access?

A

Access Token

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What Dashboard can be used to switch between Azure AD directories?

A

Directory + Subscription

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What user only exists in Azure AD?

A

Cloud identities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What are two Sources of cloud identities in Azure AD?

A
  1. Azure Active Directory

2. External Azure Active Directory

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What user exists in an on-premises Active Directory?

A

Directory-synchronized identities

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What is the Source of Directory-synchronized identities?

A

Windows Server AD

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What user exists outside of Azure AD?

A

Guest users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What is the Source of a Guest user?

A

Invited user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

On what blade can you create a new user and a security group in Azure?

A

Azure Active Directory blade

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

How long is a user in a suspended state after deletion?

A

30 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

Which roles will allow you to restore or permanently delete users?

A
  • Global Administrator
  • Partner Tier 1 Support
  • Partner Tier 2 Support
  • User Administrator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

On what blade in Azure AD can you assign Licenses?

A

Marketing blade

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

On what blade in Azure AD can you restore deleted Users?

A

Users

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What two types of user groups are defined in Azure AD?

A
  • Security Groups

- Microsoft 365 Groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What type of group manages member and computer access to shared resources for a group of users?

A

Security Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What type of group provides collaboration by giving members access to a shared mailbox, calendar, Sharepoint site, and more?

A

Microsoft 365 Group

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

What two Membership types are available for Azure AD groups?

A
  • Assigned

- Dynamic

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Group membership generated by a formula each time the group is used including any recipient in Active Directory that matches its filter.

A

Dynamic Licensing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

Eliminating the need for Powershell to adjust licensing on a per-user basis, what feature of Azure AD ensures that licenses are dynamically assigned based on group membership?

A

Group-based licensing

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

What licenses allow group-based licensing?

A
  • Azure AD Premium 1

- E3, A3, GCC G3, E3 for GCCH, or E3 for DOD

23
Q

What Group type can you apply group-based licensing to?

A

Security

24
Q

Can an administrator disable individual service plans within a license after applying it?

A

Yes

25
Q

What portal is required to apply group-based licensing?

A

Azure AD

26
Q

How long do changes to group-based licensing changes take to go into affect?

A

A few minutes

27
Q

Describe the affects of a user being assigned multiple different and similar licenses as the result of different group memberships.

A
  • Similar licenses will only consume one license

- The user’s licensing is a combination of all assigned licenses.

28
Q

Because some services are not available in all locations, what should be specified in the User Profile before assigning the license?

A

Usage location

29
Q

If usage location is not specified in the User Profile, what location is used?

A

Location of the directory

30
Q

What is a licensing error state?

A

Communication post-assignment through the Azure AD portal that there is an issue with the group-based license assignment.

31
Q

How should you resolve an Azure AD error of “not enough licenses”?

A

Purchase more licenses or free unused licenses

32
Q

What is the Powershell coding for “not enough licenses”?

A

CountViolation

33
Q

How should you resolve an Azure AD error of “Conflicting service plans”?

A

You should disable one of the two plans

34
Q

What is the Powershell coding for “Conflicting service plans”?

A

MutuallyExclusiveViolation

35
Q

How should you resolve an Azure AD error of “Other products depend on this license”?

A

Find another means of providing the service plan to the affected user.

36
Q

What is the Powershell coding for “Other products depend on this license”?

A

DependencyViolation

37
Q

How should you resolve an Azure AD error of “Usage location isn’t allowed”?

A

Change the Usage location in the User Profile

38
Q

What is the Powershell coding for “Usage location isn’t allowed”?

A

ProhibitedInUsageLocationViolation

39
Q

How should you resolve an Azure AD error of “Duplicate proxy addresses”?

A

Edit to unique proxy addresses and force license processing on the affected group.

40
Q

How should you resolve an Azure AD error of “Azure AD Mail and ProxyAddresses attribute change”?

A

Review license assignments that inadvertently update the proxy address for a specific user.

41
Q

How should you resolve an Azure AD error of “LicenseAssignmentAttributeConcurrencyException” in audit logs?

A

No action required. This informational error indicates that a user is getting the same license from two group memberships.

42
Q

How should you resolve an Azure AD error of “More than one product license assigned to a group”?

A

Use Azure AD to review the users who failed to be assigned a license and the products affected.

43
Q

What happens if a license with dependent licenses is removed from a group?

A

The affected users’ license will change from inherited to direct so as to maintain the dependent license.

44
Q

How should you resolve an Azure AD error of “License operation failed. Make sure that the group has necessary services before adding or removing a dependent service”?

A

EITHER
- Ensure that the group has the prerequisite license installed
OR
- Create a standalone group with the minimum required products for the add-on.

45
Q

How do you refresh a group to show changes to licensing?

A

Use the Reprocess button

46
Q

How do you refresh a user after making updates to licensing?

A

Use the Reprocess button

47
Q

When migrating user licenses, what is the one thing you should avoid?

A

A process that results in the removal of a license

48
Q

What is the recommended user license migration process?

A
  1. Leave existing automation in place.
  2. Create a new licensing group populated with users.
  3. Assign the required licenses to those groups reflecting automation in step 1.
  4. Verify license application for groups.
  5. Verify no licenses application failures.
49
Q

During a license migration, when is it safe to remove direct licensing?

A

When direct and inherited licensing are equivalent.

50
Q

True or false: license changes to users or groups in Azure AD are simultaneous?

A

True

51
Q

List five assumptions you should verify about license assignments before performing a license migration.

A
  1. Ensure users have inherited, not direct licensing.
  2. You have enough licenses available.
  3. Users don’t have a conflicting license.
  4. Proper time is allowed for on-premise changes to sync to Azure AD.
  5. Dynamic membership should be done by group, licenses are not adjusted.
52
Q

Typically, Azure AD defines users in three ways. Cloud identities and guest users are two of the ways. What is the third way Azure AD defines users?

A

As directory-synchronized identities.

53
Q

Azure AD group-based licensing makes large-scale management easier. Typically, how soon are license modifications effective after group membership changes are made?

A

Within minutes of a membership change.

54
Q

Azure AD allows for the definition of two different types of groups; one type is Security groups, which are used to manage member and computer access to shared resources. What is the other type of group?

A

Microsoft 365 groups, which provide access to shared mailboxes, calendars, SharePoint sites, and so on.

Microsoft 365 Security Administration (MS-500) (11 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions