AZ-104 uC Identities & Gov

Select the ways in which you can provision AD Join.

• None of These

• Windows Autopilot

• Azure Mobility

• Bulk Enrollment

• Self-Service in OOBE

To create a custom role, users must have the _________ permission on all AssignableScopes.

• Microsoft.Authorization/roleDefinitions/create

• Microsoft.Authorization/roleDefinitions/write

• Microsoft.Authorization/roleDefinitions/scope

• Microsoft.Authorization/roleDefinitions/read

______ assignments are set and controlled by applying a resource lock for resources created through Azure Blueprints.

• Lock

• Access

• Deny

• Block

How many co-administrators can be assigned per Azure subscription?

• 200

• 100

• 50

• unlimited

The maximum number of registered devices a user can have is set in _______.

• Azure Active Directory, Security, Device Settings

• Azure Active Directory, Devices, Device Settings

• Azure Active Directory, User Settings, Device Settings

• Azure Active Directory, Mobility, Device Settings

Answer explanation

Azure Active Directory contains a dedicated area for devices and their settings. By going to Azure Active Directory, Devices, Device Settings, you can set the maximum number of devices per user.https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

Which of the following statements is true about Azure AD using role-based access?

• It allows using the custom roles only.

• It does not allow the use of custom roles.

• It allows using the built-in roles only.

• It allows the use of both built-in roles and custom roles.

Answer explanation

The role-based access (RBAC) in Azure Active Directory (AD) allows the use of both built-in roles and custom roles to create and manage users, groups, and objects in Azure and on-premises.

Which of the following built-in RBAC roles are available in Azure for authorizing access to Blob and Queue Storage?

Each correct answer represents a complete solution. Choose all that apply.

• Storage Queue Data Message Owner

• Storage Queue Data Contributor

• Storage Queue Data Message Contributor

• Storage Blob Data Contributor

• Storage Blob Data Owner

Which of these settings comes under the Device settings screen?

Each correct answer represents a complete solution. Choose all that apply.

• Users may register their devices with Azure AD

• Minimum number of devices per user

• Users may join devices to Azure AD

• Additional local administrators on Azure AD joined devices

Which of these is true about administrator breakdown per subscription?

• 2 Account Administrator and 1 Service Administrator are allowed per Azure subscription

• 1 Account Administrator and 2 Service Administrator are allowed per Azure subscription.

• 2 Account Administrator and 2 Service Administrator are allowed per Azure subscription.

• 1 Account Administrator and 1 Service Administrator are allowed per Azure subscription.

Answer explanation

Which of the following commands can be used to create new tags?

• az new tag 

• az create new tag 

• az tag update

• az update tag

Answer explanation