Azure-Final-Exam

What is a benefit of using Microsoft Entra ID versus Active Directory (AD)?

•       Microsoft Entra ID uses Kerberos authentication for access across applications

•   Microsoft Entra ID is a cloud-based identity solution

•     Microsoft Entra ID can query using Lightweight Directory Access Protocol (LDAP)

What is the primary purpose of creating Guest user accounts in Microsoft Entra ID?

•      To manage internal employee access to Entra resources

•   To provide temporary administrative access to Entra services

• A.      To assign permissions to users from another Entra tenant or a Microsoft account

Your company has serval departments. Each department has a number of virtual machines (VMs). The company has an Azure subscription that contains a resource group named RG1.
All VMs are located in RG1. You want to associate each VM with its respective department.
What should you do?

•  Create Azure Management Groups for each department.

• Create a resource group for each department

• Assign tags to the virtual machines.

• Modify the settings of the virtual machines

You have an Azure subscription that contains a user named User1.
You need to ensure that User1 can deploy virtual machines and manage virtual networks. The solution must use the principle of least privilege.
Which role-based access control (RBAC) role should you assign to User1?

•       Owner

•    Virtual Machine Administrator Login

•    Contributor

•      Virtual Machine Contributor

What is an Azure AD Account?

• 1. An identity created through Azure AD or another Microsoft cloud service, such as Microsoft 365

• 1. A local account on an Azure virtual machine (VM)

• 1. An account used for billing purposes in Azure

• 1. An account with administrative privileges for managing Azure resources

Which of the following can be used to manage governance across multiple Azure subscriptions?

•     Resource groups

•      Azure Policy

•      Management groups

•    Role-based access control (RBAC)

What is the purpose of Microsoft Entra ID device registration?

•      Direct Hardware Management

•      To manage a device’s identity

•      To authenticate users

•      To create a new Azure AD tenant

What is the maximum number of directory objects supported by Microsoft Entra ID Free edition?

•      100,000

•     500,000

•     1,000,000

•     Unlimited

Which feature allows you to prevent accidental deletion of Microsoft Azure resources?

•    Soft delete

•      Read Lock

•     Role-based access control (RBAC)

•     Conditional access policies

What is Azure AD (Entra ID) Privileged Identity Management (PIM) used for?

• Managing authentication mechanisms in Entra ID

• Disabling multi-factor authentication (MFA) for Entra ID users

• Configuring role-based access control (RBAC) for Azure resources

• Managing and monitoring elevated access to Azure resources