Az 104 Manage Subscription and Governance

Your company has serval departments. Each department has a number of virtual machines (VMs).
The company has an Azure subscription that contains a resource group named RG1.
All VMs are located in RG1.
You want to associate each VM with its respective department.
What should you do?

• • Create Azure Management Groups for each department.

• Create a resource group for each department.

• Assign tags to the virtual machines.

• Modify the settings of the virtual machines.

You have an Azure Active Directory (Azure AD) tenant named contoso.com.
You have a CSV file that contains the names and email addresses of 500 external users.
You need to create a guest user account in contoso.com for each of the 500 external users.
Solution: You create a PowerShell script that runs the New-AzureADMSInvitation cmdlet for each external user.
Does this meet the goal?

• Yes

• No

You plan to grant three users named User1, User2, and User3 access to a temporary Microsoft SharePoint document library named Library1.
You need to create groups for the users. The solution must ensure that the groups are deleted automatically after 180 days.
Which two groups should you need to create?

• • Microsoft 365 group that uses the Assigned membership type

• Security group that uses the Assigned membership type

• Microsoft 365 group that uses the Dynamic User membership type

• Security group that uses the Dynamic User membership type

You have the below Azure management groups
Tenant Root Group,

'ManagementGroup11' which comes under 'Tenant Root Group'

'ManagementGroup12' which comes under 'Tenant Root Group'

'ManagementGroup21' which comes under 'Management Group11'

You add Azure subscriptions to the management groups as shown below:
Subscription1 to 'ManagementGroup21'

Subscription2 to 'ManagementGroup12'

You create the Azure policies shown below:
Policy - Not allowed resource Types

Parameter - Virtual Networks

Scope - Tenant Root Group

Policy - Allowed resource Types

Parameter - Virtual Networks

Scope - 'ManagementGroup12'

You can create Virtual Network in Subscription1

• Yes

• No

You have the below Azure management groups
Tenant Root Group,

'ManagementGroup11' which comes under 'Tenant Root Group'

'ManagementGroup12' which comes under 'Tenant Root Group'

'ManagementGroup21' which comes under 'Management Group11'

You add Azure subscriptions to the management groups as shown below:
Subscription1 to 'ManagementGroup21'

Subscription2 to 'ManagementGroup12'

You create the Azure policies shown below:
Policy - Not allowed resource Types

Parameter - Virtual Networks

Scope - Tenant Root Group

Policy - Allowed resource Types

Parameter - Virtual Networks

Scope - 'ManagementGroup12'

You can create Virtual Machine in Subscription2

• Yes

• No

You have the below Azure management groups
Tenant Root Group,

'ManagementGroup11' which comes under 'Tenant Root Group'

'ManagementGroup12' which comes under 'Tenant Root Group'

'ManagementGroup21' which comes under 'Management Group11'

You add Azure subscriptions to the management groups as shown below:
Subscription1 to 'ManagementGroup21'

Subscription2 to 'ManagementGroup12'

You create the Azure policies shown below:
Policy - Not allowed resource Types

Parameter - Virtual Networks

Scope - Tenant Root Group

Policy - Allowed resource Types

Parameter - Virtual Networks

Scope - 'ManagementGroup12'

You can add Subscription1 to 'ManagementGroup11'

• Yes

• No

You have an Azure policy as shown below:

Scope - Subscription1

Exclusion - Subscription1/ContosoRG1

Policy Definition - Not Allowed Resource Types

Assignment Name - Not Allowed Resource Types

Parameters for 'Not Allowed Resource Types' - Microsoft.Sql/servers

What is the effect of the policy?

• You are prevented from creating Azure SQL servers anywhere in Subscription 1

• You can create Azure SQL servers in ContosoRG1 only

• You are prevented from creating Azure SQL Servers in ContosoRG1 only

• You can create Azure SQL servers in any resource group within Subscription 1

You have an Azure subscription that contains the resources shown in table 1

You assign a policy to RG6 as shown in table 2

To RG6, you apply the tag: RGroup: RG6.
You deploy a virtual network named VNET2 to RG6.
Which tags apply to VNET1 ?

• Department: D1 only

• Department: D1

  Label: Value1

• Department: D1

  RGroup: RG6

• Department: D1

  Label: Value1

  RGroup: RG6

You have an Azure subscription that contains the resources shown in table 1

You assign a policy to RG6 as shown in table 2

To RG6, you apply the tag: RGroup: RG6.
You deploy a virtual network named VNET2 to RG6.
Which tags apply to VNET2 ?

• None

• RGroup: RG6

• Label: Value1

• RGroup: RG6

  Label: Value1

Is User Access Administrator is an Azure AD role ?

• Yes

• No