Brainscape's Knowledge GenomeTM


Top Flashcards (Certified)
All Flashcards

MD 102 > Manage Microsoft Entra identities > Flashcards

Manage Microsoft Entra identities Flashcards

1
Q

What operational model does Microsoft Entra ID follow?

A

SaaS operational model

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
2
Q

What does Microsoft Entra ID lack support for?

A

Computer objects and management capabilities via Group Policy settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
3
Q

List 5 admin built-in roles available in Microsoft Entra ID.

A
  • Global Administrator
  • Billing Administrator
  • Service Administrator
  • User Administrator
  • Password Administrator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
4
Q

Who is assigned as the Global Administrator by default?

A

Account Administrator of the subscription hosting the Microsoft Entra instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
5
Q

What can be delegated in Microsoft Entra ID?

A

Permissions to applications to act on behalf of users and groups

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
6
Q

Which edition of Microsoft Entra ID allows dynamic group membership based on user attributes?

A

Microsoft Entra ID P1 edition

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
7
Q

What features does the Premium P2 edition of Microsoft Entra ID introduce?

A
  • Self-service group management
  • Privileged Identity Management (PIM)
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
8
Q

How can users access Microsoft Entra applications?

A

Using the web-based portal, My Apps, at https://myapps.microsoft.com

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
9
Q

What is a benefit of using the My Apps portal?

A

Support for SSO (Single Sign-On)

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
10
Q

What three built-in roles does the Azure delegation model utilize?

A
  • Owner
  • Contributor
  • Reader
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
11
Q

What is a limitation of Microsoft Entra ID regarding object arrangement?

A

Doesn’t include the OU class for hierarchical arrangement

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
12
Q

What types of accounts can be used with Microsoft Entra ID?
3

A
  • Organizational account created by tenant administrator
  • Account referencing an organizational account in other Microsoft Entra instances
  • Microsoft account
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
13
Q

What role must you have to manage Microsoft Entra ID?

A

Global Administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
14
Q

Who can sign in to the Azure portal?

A

Tenant administrator or co-administrator configured by the tenant administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
15
Q

What role do tenant administrators and co-administrators automatically receive?

A

Global Administrator role in the Active Directory instance

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
16
Q

What access does the Global Administrator role provide?

A

Access to all administrative features and settings

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
17
Q

What can the Password Administrator role do?

A

Reset passwords for users and manage service requests

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
18
Q

What role can manage billing information in Microsoft Entra ID?

A

Billing Administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
19
Q

Which role can manage user accounts and groups?

A

User Administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
20
Q

Which role is responsible for managing compliance settings?

A

Compliance Administrator

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
21
Q

What is the default role in Microsoft Entra ID?

A

User

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
22
Q

Which security roles can be configured using Privileged Identity Management?

A
  • Security reader
  • Security administrator
How well did you know this?
1
Not at all
2
3
4
5
Perfectly
23
Q

What can you manage using the Entra portal?

A

Microsoft Entra users, groups, and devices

This includes adding users to a directory and groups.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
24
Q

What are the two types of user accounts you can create on the Entra portal?

A
  • Member users
  • Guest users

Member users are managed by your Microsoft Entra tenant, while guest users are not.

How well did you know this?
1
Not at all
2
3
4
5
Perfectly
25
What are member users?
Accounts that your Microsoft Entra tenant manages ## Footnote Member users are the most commonly created user type.
26
What are guest users?
Accounts that your Microsoft Entra tenant doesn’t manage, but permissions are assigned ## Footnote Guest users can be members from another Microsoft Entra tenant or a Microsoft account.
27
How are guest user accounts often created?
Automatically when users share content with external users ## Footnote For example, sharing a OneDrive file creates a guest user account.
28
What are the two ways to create and manage users?
* As cloud identities using Microsoft Entra ID * As directory-synchronized identities using an on-premises directory service ## Footnote The second method requires synchronization software.
29
What is the quickest method to create users in Microsoft Entra?
As cloud identities using only Microsoft Entra ID ## Footnote This method is straightforward.
30
What does the directory-synchronized identity method involve?
Using an on-premises directory service to synchronize with Microsoft Entra ID ## Footnote This method is more complex due to synchronization software.
31
What does the Azure portal provide for user management?
A simple web interface for creating and managing users, groups, and devices ## Footnote This interface simplifies the management process.
32
What do Microsoft Entra groups streamline?
Access management
33
What happens when directory synchronization is enabled?
On-premises AD DS groups can be synchronized to Microsoft Entra ID
34
What remains consistent between AD DS and Microsoft Entra ID?
Group membership
35
What type of management is used if directory synchronization isn't in place?
Cloud-based group management
36
What are the two primary types of groups in Microsoft Entra ID?
* Security * Microsoft 365
37
What is the purpose of a security group in Microsoft Entra ID?
To manage resource access
38
How does managing a security group affect access?
It indirectly manages access based on group membership
39
Are Microsoft Entra security groups mail-enabled?
No
40
What services do Microsoft 365 groups facilitate access management for?
* Microsoft Teams * SharePoint * Outlook
41
What is a characteristic of Microsoft 365 groups?
They are mail-enabled
42
How do you create a group in Azure?
Navigate to Microsoft Entra ID > Groups > New group on the Azure portal
43
What options can you specify when creating a group in Azure?
* Group type * Name * Description
44
What type of membership can be assigned to a cloud-based group?
* Assigned * Dynamic
45
What does assigned membership require?
Manual addition and removal of group members
46
What is a characteristic of dynamic membership?
Members are based on a query of Microsoft Entra objects
47
On what can dynamic membership be based?
* Single attribute * Advanced membership rule with multiple attributes
48
When creating a group with dynamic membership, what must you select?
Whether it’s for users or devices
49
Which Microsoft 365 feature uses user-based groups?
Many features
50
Which service uses device-based groups?
Intune
51
What happens to groups from on-premises AD DS with dynamic membership?
They don’t synchronize with Microsoft Entra ID
52
What is the purpose of directory synchronization between Microsoft Entra ID and on-premises AD DS?
To enable user, group, and contact synchronization between on-premises Active Directory and Microsoft Entra ID.
53
What component is installed to perform directory synchronization?
A directory synchronization component on a server in your on-premises domain.
54
With Microsoft Entra ID Free or Basic, what is the direction of the synchronization flow?
From local AD DS to Microsoft Entra ID.
55
What additional capability is provided by Microsoft Entra ID P1 or P2 regarding synchronization?
The ability to replicate some attributes from Microsoft Entra ID to Active Directory DS.
56
What is Microsoft Entra Connect used for?
To perform directory synchronization between Microsoft Entra ID and AD DS.
57
What are the default settings for Microsoft Entra Connect?
Synchronizes all users and groups.
58
What filtering options are available for directory synchronization?
* OU * Domain * User attributes * Applications
59
What happens when a user identity is synchronized without the password?
The cloud-based user account will have a separate unique password.
60
What is the benefit of enabling password synchronization?
Allows users to authenticate using the same credentials.
61
What is pass-through authentication?
Microsoft Entra ID verifies that the user is valid and passes the authentication request to Microsoft Entra Connect.
62
What advantage does federated identities provide?
Claims-based authentication that multiple cloud-based apps can use.
63
What permissions are required when installing Microsoft Entra Connect?
Local Administrator on the installation computer, enterprise administrators group for local AD DS, global administrator for Microsoft Entra ID.
64
What is necessary for the computer running Microsoft Entra Connect to communicate with Microsoft Entra ID?
The computer must have internet access, possibly requiring proxy server configuration.
65
Where must Microsoft Entra Connect be installed?
On a domain member.
66
Which installation option is typically used for organizations synchronizing a single AD DS forest?
Express settings.
67
What does selecting express settings during Entra Connect installation include?
* SQL Server Express installed * All identities in the forest synchronized * All attributes synchronized * Password synchronization enabled * Initial synchronization performed immediately * Automatic upgrade enabled
68
What options can be enabled during Entra Connect custom settings installation?
* Pass-through authentication * Federation with AD FS * Select an attribute for matching existing cloud-based users * Filtering based on OUs or attributes * Exchange hybrid * Password, group, or device writeback
69
What occurs after deploying Microsoft Entra Connect with respect to new objects?
New user, group, and contact objects in on-premises Active Directory are added to Microsoft Entra ID.
70
What happens to modified attributes of existing objects in on-premises Active Directory?
They are modified in Microsoft Entra ID.
71
What occurs when existing user objects are disabled on-premises?
They are disabled in Azure, but licenses aren’t automatically unassigned.

MD 102 (26 decks)

Brainscape helps you reach your goals faster, through stronger study habits.
© 2025 Bold Learning Solutions. Terms and Conditions