Manage device authentication

Question 1

What is Microsoft Entra join?

Answer 1

A method to join devices to Microsoft Entra ID for cloud management and access.

Question 2

Which 3 operating systems support Microsoft Entra join?

Answer 2

• All Windows 11 and Windows 10 devices except Home editions,
• Windows Server 2019
• newer Virtual Machines running in Azure.

Question 3

What is a requirement for devices to join an AD DS domain?

Answer 3

Devices must run a supported operating system version;
Home editions of Windows do not support joining a domain.

Question 4

For users, what is the primary benefit of Microsoft Entra join for businesses largely in the cloud?

Answer 4

Users can sign into Windows using accounts created in Microsoft Entra ID and access cloud resources like Microsoft 365.

Question 5

What user types are typically found in educational institutions regarding Microsoft Entra ID?

Answer 5

Faculty and students.

Question 6

Why would an organization separate temporary accounts in Microsoft Entra ID?

Answer 6

To manage temporary accounts separately from regular accounts for contractors or seasonal workers.

Question 7

What is a scenario where Microsoft Entra join could be beneficial?

Answer 7

When most applications and resources used are in the cloud.

Question 8

What is required for users to join their devices to Microsoft Entra ID?

Answer 8

Users need to enter their Microsoft Entra credentials and accept management policies.

Question 9

What does Microsoft Entra hybrid join allow?

Answer 9

It allows joining on-premises Active Directory domain-joined devices to Microsoft Entra ID.

Question 10

Which operating systems are supported for Microsoft Entra hybrid join?

Answer 10

• Windows 11, Windows 10, Windows 8.1 except Home editions,
• Windows Server 2008/R2, 2012/R2, 2016, 2019, and 2022.

Question 11

True or False: Microsoft Entra hybrid join can be used in a single forest environment synchronized to multiple Microsoft Entra tenants.

Answer 11

False.

Question 12

What are the 3 reasons to use Microsoft Entra hybrid join?

Answer 12

• To manage Win32 apps that rely on Active Directory machine authentication.
• If you require Group Policy to manage some of your devices
• If you want to continue to use imaging solutions to configure devices for your employee

Question 13

What is the first planning step for Microsoft Entra hybrid join?

Answer 13

Review your environment to determine support for Windows down-level devices.

Question 14

What management tool can be used for devices registered with Microsoft Entra ID?

Answer 14

Intune.

Question 15

What is a key limitation of managing devices joined to Microsoft Entra ID?

Answer 15

Devices cannot be managed using Group Policy.

Question 16

When can users join their devices to Microsoft Entra ID?

Answer 16

During initial Windows setup or by opening system settings later.

Question 17

What is a key feature of Microsoft Entra join regarding device access to ressources ?

Answer 17

Access to cloud-based resources and Azure-based resources using SSO.

Question 18

What is the Bring Your Own Device (BYOD) concept in relation to Microsoft Entra ID?

Answer 18

Enabling users to join their own devices to the organizational environment, to access cloud resources

Question 19

What must be configured to join a Windows device in Microsoft Entra tenant?

Answer 19

The device registration service must be configured to enable you to register devices.

Question 20

What is the maximum number of devices that can be registered?

Answer 20

15
You must have fewer devices registered than the configured maximum.

Question 21

If your tenant is federated, what protocol support is required?

Answer 21

Your Identity provider MUST support WS-Fed and WS-Trust username/password endpoint.

Question 22

What is the primary purpose of Microsoft Entra join?

Answer 22

Intended for organizations that want to be
* cloud-first : primarily use cloud services, with a goal to reduce use of an on-premises infrastructure
or
* cloud-only: no on-premises infrastructure

Question 23

Are there restrictions on the size or type of organizations that can deploy Microsoft Entra join?

Answer 23

No restrictions on the size or type of organizations.

Question 24

5

What are the benefits of implementing Microsoft Entra joined devices?

Answer 24

• Single-Sign-On (SSO) to your Azure managed SaaS apps and services.
• Enterprise compliant roaming of user settings across joined devices.
• Windows Hello support
• Restriction of access to apps from only devices that meet compliance policy
• Seamless access to on-premises resources when the device has line of sight to the on-premises domain controller

Question 25

How does SSO benefit users accessing work resources?

Answer 25

Users don’t see additional authentication prompts.

Question 26

Does the SSO feature remain accessible when disconnected from the domain network?

Answer 26

Yes, it remains accessible.

Question 27

What does enterprise compliant roaming of user settings mean?

Answer 27

Users don’t need to connect a Microsoft account to see settings across devices.

Question 28

# 5 What are the reasons to use Microsoft Entra ID for organizations with on-premises infrastructure?

Answer 28

* To **transition to cloud-based infrastructure** using Microsoft Entra ID and mobile device management. * Scenarios where **you can’t use an on-premises domain join** (tablets and phones) * users primarily need to access Microsoft 365 or other SaaS apps integrated with Microsoft Entra ID * want to manage a group of users in Microsoft Entra ID instead of in Active Directory * want to provide joining capabilities to workers in remote branch offices with limited on-premises infrastructure

Question 29

What primarily manages devices capable of joining AD DS?

Answer 29

Group Policy or Microsoft Configuration Manager applications

Question 30

What happens when you join a device to Microsoft Entra ID?

Answer 30

Group Policy isn't available except with Microsoft Entra Domain Services

Question 31

Can Group Policy manage smartphones and tablets?

Answer 31

No

Question 32

Does Microsoft Entra ID provide a built-in management mechanism for devices that don't support Group Policy?

Answer 32

No

Question 33

Is Microsoft Entra Domain Services enabled by default?

Answer 33

No, it must be manually enabled and configured

Question 34

What can be configured to manage devices that join Microsoft Entra ID?

Answer 34

Integration between Azure and a mobile device management mechanism such as Intune

Question 35

What is required for a device to automatically enroll in Intune after joining Microsoft Entra ID?

Answer 35

An active Intune subscription associated with the same Microsoft Entra tenant

Question 36

What must a user have to join a device to Microsoft Entra ID?

Answer 36

An assigned Intune license

Question 37

What can be configured in Intune after a device enrolls?

Answer 37

Intune security and configuration policies

Question 38

How does Intune management differ from Group Policy management?

Answer 38

It doesn't follow the same logic and has fewer available options

Question 39

What do Intune management options primarily focus on?

Answer 39

Security and the apps on managed devices

Question 40

Fill in the blank: Microsoft Entra Domain Services must be _______.

Answer 40

[manually enabled and configured]

Question 41

True or False: Group Policy can manage all types of devices in Microsoft Entra ID.

Answer 41

False

Question 42

**What is a benefit for using Microsoft Entra ID in an organization that already has Active Directory Domain Services implemented?** 1. To remove the need for domain controllers 2. To enable iOS and Android devices to be managed using Group Policy 3. To offer users the ability to use their personal devices to access organizational resources

Answer 42

**To offer users the ability to use their personal devices to access organizational resources** With Microsoft Entra join, devices can access resources without the need to join a domain.

Question 43

**What is a benefit from using Microsoft Entra hybrid join?** 1. Organizations can apply OS configurations to employee-owned devices 2. To allow continued use of Group Policy to manage domain-joined devices 3. To automatically configure a broad range of older versions of Windows devices

Answer 43

**To allow continued use of Group Policy to manage domain-joined devices** Organizations transitioning to Microsoft Entra ID take time. Hybrid AD join allows continued use of existing group policy while leveraging the benefits that Microsoft Entra ID adds.