Manage Azure AD Users

Question 1

Which Azure AD option provides just-in-time access for administrative resource management?

Answer 1

Privileged Identity Management

Question 2

Which statements about Azure are correct?
A) A single Azure AD tenant can have multiple subscriptions
B) Azure AD tenants are not directly associated with Azure subscriptions
C) An Azure account can support only one Azure AD tenant
D) An Azure account can support multiple Azure AD tenants

Answer 2

A)

D)

Question 3

Which CLI command shows Azure AD tenant details such as the tenant ID?
A) az ad list
B) az azuread list
C) az tenant list
D) az account list

Answer 3

D)

Question 4

Which PowerShell cmdlet shows Azure AD tenant information?
A) Show-AzADTenantDetail
B) Get-AzTenant
C) Get-ADTenantDetail
D) Show-AzureTenantDetail

Answer 4

B)

Question 5

Which types of Azure AD users can be created using the portal?
A) Azure AD
B) Office 365
C) Guest
D) Sharepoint

Answer 5

A)

C)

Question 6

Which CLI command shows only Azure AD mail nick names?
A) az ad user list –query mailNickname
B) az ad user list –query [].mailNickname
C) az ad user list –query [].mailnickname
D) az ad user list –query mailnickname

Answer 6

B)

Question 7

Which PowerShell cmdlet is used to add an Azure AD user account?
A) Add-AzADUser
B) New-AzADUser
C) Create-AzADUser
D) Add-ADUser

Answer 7

B)

Question 8

Which PowerShell cmdlet is used to add Azure AD users?
A) New-AzADUser
B) Create-ADUser
C) Add-AzADUser
D) Create-AzADUser

Answer 8

A)

Question 9

Which file format is used to create users through bulk create?
A) XML
B) PDF
C) XLS
D) CSV

Answer 9

D)

Question 10

How does Azure AD bulk user create differ from bulk user invite?
A) Create is for external users
B) Invite uses an XML file, create uses a CSV file
C) Invite is for external users
D) Invite uses a CSV file, create uses an XML file

Answer 10

C)

Question 11

Which of the following constitutes MFA?
A) Fingerprint, retinal scan
B) Smartcard, keyfob
C) Username, PKI security certificate
D) Username, password

Answer 11

C)

Question 12

You are viewing Azure AD user MFA settings. Some users show MFA as being “enabled” while others show “enforced”. What is the difference?
A) Enforced shows after successful MFA login
B) Enabled show after successful MFA login
C) Enabled means MFA policies are not associated with the user
D) Enforced means MFA policies are associated with the user

Answer 12

A)

Question 13

What is the default wait time in days for user MFA block?
A) 30
B) 10
C) 5
D) 90

Answer 13

D)

Question 14

You are configuring Azure AD self-service password reset. Which options are available?
A) None, all
B) None, selected, all
C) Users, devices
D) Users, devices, groups

Answer 14

B)

Question 15

How long (in days) are deleted Azure AD users recoverable?
A) 30
B) 90
C) 10
D) 5

Answer 15

A)

Question 16

You notice that some Azure AD users have inherited licenses. What does this mean?
A) Licenses have been upgraded from previous Azure versions
B) Licenses were assigned directly to users
C) Licenses were assigned to resource groups
D) Licenses were assigned to groups

Answer 16

D)

Question 17

Which statements regarding Azure AD custom banned password lists are true?
A) Listed passwords are case sensitive
B) A maximum of 1,000 passwords can be specified
C) A maximum of 500 passwords can be specified
D) Listed passwords are case insensitive

Answer 17

B)

D)

Question 18

You have added Office 365 licensing to your Azure AD tenant. Users complain that they are still unable to access Office 365. What is the problem?
A) Users are not in the correct roles
B) The Azure AD tenant is not refreshed
C) Licenses have not been assigned to resource groups
D) Licenses have not been assigned to users

Answer 18

D)

Question 19

Which term is synonymous with Azure AD tenant?
A) Azure AD subscription
B) Azure AD root management group
C) Azure account
D) Azure AD instance

Answer 19

D)

Question 20

Which type of malicious attack does smart lockout mitigate?
A) DoS
B) Brute force
C) Man-in-the-middle
D) DDoS

Answer 20

B)