HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant named adatum.com that contains the groups shown in the following table.Adatum.com contains the users shown in the following table.You assign a Microsoft Entra ID P2 license to Group1 as shown in the following exhibit.Group2 is NOT directly assigned a license.For each of the following statements, select Yes if the statement is true. Otherwise, select No.NOTE: Each correct selection is worth one point.Hot Area:
Answer(s): A
Box 1: NoUser1 is a member of Group1.In the Assign License exhibit we see: Assignment optionsMicrosoft Defender for Cloud Apps Discovery: offBox 2: YesUser1 is a member of Group1.In the Assign License exhibit we see: Assignment optionsMicrosoft Entra ID P2: OnBox 3: YesUser2 is a member of Group2. Group2 is a member of Group1.In the Assign License exhibit we see:Assignment options* Microsoft Entra ID P2: On
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/license-users-groups
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra hybrid deployment that contains the users shown in the following table.You need to modify the JobTitle and UsageLocation attributes for the users.For which users can you modify the attributes from Microsoft Entra ID? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: User1 and User3 onlyYou must use Windows Server Active Directory to update the identity, contact info, or job info for users whose source of authority is Windows Server Active Directory.Box 2: User1, User2, and User3 Reference:https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-users-profile-azure-portal
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft Entra tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users.Solution: You create a PowerShell script that runs the New-MgUser cmdlet for each external user. Does this meet the goal?
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.You have a Microsoft Entra tenant named contoso.com.You have a CSV file that contains the names and email addresses of 500 external users. You need to create a guest user account in contoso.com for each of the 500 external users.Solution: You create a PowerShell script that runs the New-MgInvitation cmdlet for each external user. Does this meet the goal?
Answer(s): B
Wrong module.New-MgInvitationModule: Microsoft.Graph.Identity.SignInsUse this API to create a new invitation. Invitation adds an external user to the organization. When creating a new invitation, you have several options available:Instead use the New-AzureADMSInvitation cmdlet which is used to invite a new external user to your directory. Reference:https://docs.microsoft.com/en-us/powershell/module/azuread/new-azureadmsinvitation
You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1.A user named User1 has the following roles for Subscription1: ReaderSecurity Admin Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?
Answer(s): C
User Access AdministratorManage user access to Azure resources Assign roles in Azure RBACAssign themselves or others the Owner roleIncorrect:Not B: Network ContributorLets you manage networks, but not access to them.Not A, not D: ContributorGrants full access to manage all resources, but does not allow you to assign roles in Azure RBAC, manage assignments in Azure Blueprints, or share image galleries.
https://learn.microsoft.com/en-us/azure/role-based-access-control/built-in-roles
You have an Azure subscription named Subscription1 that contains virtual network named VNet1. VNet1 is in a resource group named RG1.User named User1 has the following roles for Subscription1: ReaderSecurity Admin Security ReaderYou need to ensure that User1 can assign the Reader role for VNet1 to other users. What should you do?
Answer(s): D
The User Access Administrator role enables the user to grant other users access to Azure resources.Note:There are several versions of this question in the exam. The question has three possible correct answers:* Assign User1 the Access Administrator role for VNet1.* Assign User1 the User Access Administrator role for VNet1.Assign User1 the Owner role for VNet1.Other incorrect answer options you may see on the exam include the following:* Assign User1 the Contributor role for VNet1.* Remove User1 from the Security Reader and Reader roles for Subscription1. Assign User1 the Contributor role for Subscription1.* Remove User1 from the Security Reader role for Subscription1. Assign User1 the Contributor role for RG1.
https://docs.microsoft.com/en-us/azure/role-based-access-control/overview https://learn.microsoft.com/en-us/azure/role-based-access-control/rbac-and-directory-admin-roles
HOTSPOT (Drag and Drop is not supported)You have an Azure Storage account named storage1 that uses Azure Blob storage and Azure File storage. You need to use AzCopy to copy data to the blob storage and file storage in storage1.Which authentication method should you use for each type of storage? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
You can provide authorization credentials by using Microsoft Entra ID, or by using a Shared Access Signature (SAS) token.Box 1: Microsoft Entra ID and Shared Access Signature (SAS)Both Microsoft Entra ID and Shared Access Signature (SAS) token are supported for Blob storage.Box 2: Shared Access Signature (SAS) onlyOnly Shared Access Signature (SAS) token is supported for File storage.
https://docs.microsoft.com/en-us/azure/storage/common/storage-use-azcopy-v10
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant that contains a user named External User. External User authenticates to the tenant by using external195@gmail.com.You need to ensure that External User authenticates to the tenant by using contractor@gmail.com.Which two settings should you configure from the Overview blade? To answer, select the appropriate settings in the answer area.NOTE: Each correct answer is worth one point.Hot Area:
Box 1: IdentitiesKey properties of the Microsoft Entra B2B collaboration user include:* IdentitiesThis property indicates the user’s primary identity provider. A user can have several identity providers, which can be viewed by selecting the link next to Identities in the user’s profile or by querying the identities property via the Microsoft Graph API.Box 2: B2B collaboration B2B collaboration overviewMicrosoft Entra B2B collaboration is a feature within External Identities that lets you invite guest users tocollaborate with your organization. With B2B collaboration, you can securely share your company's applications and services with external users, while maintaining control over your own corporate data. Work safely and securely with external partners, large or small, even if they don't have Microsoft Entra ID or an IT department.
https://learn.microsoft.com/en-us/azure/active-directory/external-identities/what-is-b2b
Post your Comments and Discuss Microsoft AZ-104 exam prep with other Community members: