Brainscape's Knowledge GenomeTM

Browse over 1 million classes created by top students, professors, publishers, and experts.


See full index

AZ-104 > Manage Azure Identies & Governance > Flashcards

Manage Azure Identies & Governance Flashcards

1
Q

What are the 3 ways Azure AD defines users:

A
  1. Cloud identities
  2. Directory-synchronized identities
  3. Guest users
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

How does synchronization occur for Directory-synchronized identities?

A

Azure AD Connect

https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

What is the source of a Guest user?

A

Invited user

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

What are the diffirent ways you can add new users?

A
  1. Azure Portal
  2. Microsoft 365 Admin Center
  3. Microsoft Intune admin console
  4. Azure CLI
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

Deleted users can be restored for how many days?

A

30 days

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

What roles is required to create users in Azure?

A
  • Global administrator
  • User administrator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What is another option for bulk user uploads besides the csv template?

A

PowerShell Script

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

What are the two types of group accounts?

A
  1. Security groups
  2. Microsoft 365 groups
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What type of group would you use to for a specific security policy?

A

Security groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What role is required to create a Security group?

A

Azure AD administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What type of security group would you use to give users access to a SharePoint site?

A

Microsoft 365 groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What are the three different ways you can assign access rights to groups?

A
  1. Assigned
  2. Dynamic user
  3. Dynamic Device (Security groups only)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What methods can you use to manage administrative units?

A
  • Azure portal
  • PowerShell cmdlets and scripts
  • Microsoft Graph
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

How can you restrict administrative scope?

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

Define Azure AD

A

Microsoft’s multi-tenant cloud based directory and identity management service

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What is an identity?

A

An object that can get authenticated. A user, applications and servers. Applications might require access through secret keys or certs.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What is an account?

A

An identity that has data associated with it. You cannot have an account without an identity.

18
Q

What is an Azure AD account?

A

An identity created through Azure AD or another Microsoft cloud service. Sometime called a Work or school account.

19
Q

What is an Azure subscription?

A

A subscription is used to pay for Azure cloud services. You can have many subscriptions linked to the same credit card.

20
Q

What is an Azure tenant/directory?

A

A dedicated and trusted instance of Azure AD. A Tenant is automatically created when your organization signs up for a Microsoft cloud service subscription. Tenant means a single instance of Azure AD representing single organization. Tenant and Directory are used interchangeably.

21
Q

What components make up the Windows Active Directory suite?

A
  • Active Directory Certificate Services (AD CS)
  • Active Directory Lightweight Directory Services (AD LDS)
  • Active Directory Federation Services (AD FS)
  • Active Directory Rights Management Service (AD RMS)
22
Q

What are some of the main characteristics of Azure AD that make it different from Active Directory Domain Services?

A
  • Primarily an identity solution designed for internet apps (http/https)
  • Cannot be queried through LDAP. Azure AD uses REST API over http or https
  • It does not use Kerberos authentication. Uses HTTP and HTTPs protocols
    • SAML
    • WS-Federation
    • OpenID Connect (authentication)
    • OAuth (authorization)
  • Includes Federation Services like Facebook
  • Use a flat structure for user and groups. There are no Organizational Units (OUs) or Group Policy Objects (GPOs)
23
Q

What communication protocols does Azure AD use for authentication?

A

It only uses HTTP/HTTPs based protocols like SAML, WS-Federation and OpenID Connect

24
Q

Does Azure AD support Organizational Units and Group Policy Objects?

A

No. Azure AD user and groups are created in a flat structure.

25
Q

Why does’n’t Azure AD support LDAP queries?

A

Azure AD is based on HTTP/HTTPS and uses REST APIs

26
Q

What are the only three things you manage in Azure AD?

A

Users, groups and policies

27
Q

What are the four editions of Azure AD?

A

Free, Microsoft 365 Apps, Premium P1 and Premium P2

28
Q

What agreement or programs are the Premium additions available through?

A

Microsoft Enterprise Agreement, Open Volume License Program, Cloud Solution Provider program

29
Q

What additional features does Azure AD Premium P1 provide?

A

Hybird users can access on-prem and cloud resources. Supports dynamic groups, self-service group management, Microsoft Identity Manager, cloud write-back self-service password reset for on-prem users.

30
Q

What additional features does Azure AD Premium P2 provide?

A

Azure Active Directory Identity Protection to help provide risk-based Conditional Access. Privileged Identity Management to help discover, restrict, monitor admins and their access to resources which provide JIT access.

31
Q

What is Azure AD Join?

A

Designed to provide access to organizational apps and resources and to simplify Windows deployments of work-owned devices.

32
Q

What are the benefits of Azure AD Join?

A
  • SSO
  • Enterprise state roaming of user settings
  • Access to Microsoft Store for Business
  • Windows Hello
  • Restriction of access to apps from only devices the meet company compliance
  • Seamless access to on-premise resources
33
Q

How are datacenters made available to end users by?

A

Region. Over 60+ regions and 140 countries.

34
Q

What global Azure service do not require the end user to select a region?

A

Azure Active Directory, Azure Traffic Manager and Azure DNS

35
Q

What are regional pairs and their features?

A
  • Each region is paired with another region within the same geography
  • At least 300 miles of separation between datacenters
  • Platform-provided replication - automatic replication to the paired region (Geo-Redundant)
  • Region recovery order - one region is prioritized over the other
  • Sequential updates - rollouts of updates
  • Data residency - except for Brazil. to meet tax and law enforcement jurisdiction
36
Q

What is an Azure Subscription?

A

Logical unit of Azure Services linked to an Azure account. Billing is managed per-subscription basis. Every subscription can be associated with AAD.

37
Q

What ways can you get an Azure subscripiton?

A
  • Enterprise agreements - upfront monetary commitment. have a 99.95 monthly SLA
  • Reseller - buy through Open Licensing Program
  • Partners - find a partner to implement a solution
  • Personal free account - free trial
38
Q

What are the different ways to assign access rights

A

Direct assignment

Group assignment

Rule-based assignment

39
Q

What type of assignment is at the user level?

A

Direct Assignment

40
Q

What type of assignment is used for a Group?

A

Group assignment

41
Q

What type of assignment is based on user or device properties to determine if the membership is valid?

A

Rule-based assignment

42
Q
A

AZ-104 (5 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2024 Bold Learning Solutions. Terms and Conditions