104 test

A user is having trouble accessing an application integrated with Azure AD. You suspect the issue is related to user assignment. What should you check first?

• User's assigned roles

• User's group membership

• Application's user assignment settings

• Application's SAML configuration

Your company requires all users to be automatically enrolled in multi-factor authentication (MFA) as soon as they join. How should you configure this?

• Create a Conditional Access policy targeting all users

• Enable MFA in the user settings

• Use Azure AD Identity Protection to enforce MFA

• Configure MFA through Azure AD Connect

You need to grant temporary elevated access to a user to manage certain resources in Azure AD. Which feature should you use?

• Privileged Identity Management (PIM)

• Azure AD Conditional Access

• Azure AD Identity Protection

• Role-Based Access Control (RBAC)

A new device needs to be enrolled and managed by Azure AD. Which join type should be used for a company-owned Windows 10 device?

• Azure AD Registered

• Azure AD Joined

• Hybrid Azure AD Joined

• Workplace Join

You need to ensure that guest users in your directory cannot see the membership of groups they are added to. Which setting should you modify?

• Group settings in Azure AD

• Conditional Access policies

• External collaboration settings

• Access reviews

You need to apply a set of access permissions to multiple resource groups across different subscriptions. What is the most efficient way to achieve this?

• Apply RBAC roles individually to each resource group

• Use Management Groups to apply the RBAC roles

• Create a custom role and assign it to each resource group

• Use Azure Policy to enforce the roles

A user needs to view all resources in a subscription but should not be able to make any changes. Which role should you assign?

• Owner

• Contributor

• Reader

• Security Reader

To implement least privilege access for a developer who needs to manage VMs in a specific resource group, which role should you assign?

• Owner

• Virtual Machine Contributor

• Contributor

• User Access Administrator

You need to review all the access permissions assigned to a user across different subscriptions. Which tool should you use?

• Azure Monitor

• Azure Security Center

• Azure AD Privileged Identity Management (PIM)

• Azure Activity Logs

You need to ensure that a certain user can assign roles to other users within a specific resource group. Which role should you assign to this user?

• Owner

• Contributor

• User Access Administrator

• Reader