AZ 104 Final Exam Questions and Answers 2022 Update

Document Content and Description Below

AZ 104 Final Exam Questions and Answers 2022 Update What is the difference between Identity and Account? An identity is an object that can be authenticated. An Account is an identity plus data suc... h as first name, last name and department. What is azure tenant? A dedicated and trusted instance of Azure AD that is automatically created when an organization signs up for a Microsoft Cloud Service. What is Azure AD directory? Each Azure tenant has a dedicated and trusted Azure AD Directory. They are automatically created when your organization signs up for a Microsoft cloud subscription. What is a User Subscription? Used to pay for Azure Services What is AD DS? Active Directory Domain Services What is Azure AD? Free or Paid Services running Microsoft Cloud. What is Azure AD DS? Cloud managed highly available AD DS as a service. What are the four versions of Azure Active Directory? Free, M365, Premium1 and Premium 2. What two features does Premium P2 edition offer that Premium P1 doesn't? Identity Protection and Identity Governance Which Azure Active Directory Editions provide Dynamic Groups? M365/Premium 1 and Premium 2. Do GPOs work in Azure Active Directory? No because it is flat and not hierarchial like AD DS. Is AD DS encrypted by default? No. Azure Active Directory is encrypted by default. What is a user account in AD used for? authentication and authorization What is authentication? Do you have a username and password. What is authorization? What are you allowed to do? What are the three types of accounts? 1. cloud 2. directory-synchronized 3. guest How many days can a deleted user be restored in? 30 days How can you add bulk user accounts? 1. Bulk upload users via Portal using csv template 2. Bulk upload users via PowerShell New-AzADUser What are the group types? Security Groups Office 365 groups What are the 3 group assignment types? 1. Assigned 2. Dynamic User 3. Dynamic Device (Security groups only) True or False: Each Azure AD is a fully independent resource. True There is no parent-child relationship between tenants Where will azure ad directories get created? 1. Intune 2. Microsoft 365 3. Azure Portal sign-up links Can subscriptions be moved between directories? Yes What option allows password changes to be done between on-premise and Azure AD? Password write-back What is azure ad connector health? It monitors the sync between on-prem ad and cloud. What are the authentication options for Azure AD Join? OAuth/Open ID connect What are the authentication methods for Azure AD Domain Services? Kerberos, NTLM How is management done for Azure AD Join? Mobile Device Management (MDM) software like Intune. How is management done for Azure AD Domain Services computers? Group policy What are the network consideration for Azure AD Join devices? Works over the Internet What are the networking considerations for Azure AD Domain Services? - Requires machines to be on the same virtual network as the managed domain - can use virtual network peering or site-to-site VPNs to extend connectivity. MFA - what is something you know? your password MFA - what is something you have? hardware key or cell phone [Show More]

Last updated: 1 year ago

Preview 1 out of 13 pages