You have a Microsoft Entra tenant.You plan to perform a bulk import of users.You need to ensure that imported user objects are added automatically as the members of a specific group based on each user's department. The solution must minimize administrative effort.Which two actions should you perform? Each correct answer presents part of the solution.NOTE: Each correct selection is worth one point.
Answer(s): C,F
C: Dynamic membership rules for groups in Microsoft Entra IDYou can create attribute-based rules to enable dynamic membership for a group in Microsoft Entra ID, part of Microsoft Entra. Dynamic group membership adds and removes group members automatically using membership rules based on member attributes.F: Bulk create users in Microsoft Entra IDMicrosoft Entra ID, part of Microsoft Entra, supports bulk user create and delete operations and supports downloading lists of users. Just fill out comma-separated values (CSV) template you can download from Microsoft Entra ID.
https://learn.microsoft.com/en-us/entra/identity/users/groups-dynamic-membership https://learn.microsoft.com/en-us/entra/identity/users/groups-bulk-import-members
You have an Azure subscription that contains a storage account named storage1. You need to ensure that the access keys for storage1 rotate automatically.What should you configure?
Answer(s): D
Use Azure Key Vault to manage your access keysMicrosoft recommends using Azure Key Vault to manage and rotate your access keys. Your application cansecurely access your keys in Key Vault, so that you can avoid storing them with your application code.Note: Manually rotate access keysMicrosoft recommends that you rotate your access keys periodically to help keep your storage account secure. If possible, use Azure Key Vault to manage your access keys. If you are not using Key Vault, you will need to rotate your keys manually.
https://learn.microsoft.com/en-us/azure/storage/common/storage-account-keys-manage
You have an Azure subscription that contains the Microsoft Entra identities shown in the following table.You need to enable self-service password reset (SSPR).For which identities can you enable SSPR in the Azure portal?
DRAG DROP (Drag and Drop is not supported)You have a Microsoft Entra tenant.You need to ensure that when a new Microsoft 365 group is created, the group name is automatically formatted as follows:<Department><Group name>.Which three actions should you perform in sequence in the Microsoft Entra admin center? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.Select and Place:
Answer(s): A
Step 1: Create a group naming policyEnforce a naming policy on Microsoft 365 groups in Microsoft Entra IDTo enforce consistent naming conventions for Microsoft 365 groups created or edited by your users, set up agroup naming policy for your organizations in Microsoft Entra ID.Configure a naming policySign in to the Microsoft Entra admin center as at least a Group Administrator.Select Microsoft Entra ID.3. Select All groups > Groups, and then select Naming policy to open the Naming policy page.Step 2: Set Add prefix to AttributeView or edit the prefix-suffix naming policyOn the Naming policy page, select Group naming policy.You can view or edit the current prefix or suffix naming policies individually by selecting the attributes or strings you want to enforce as part of the naming policy.To remove a prefix or suffix from the list, select the prefix or suffix, and then select Delete. You can delete multiple items at the same time.4. Save your changes for the new policy to go into effect by selecting Save.Step 3: Set Select type to DepartmentIncorrect:* Set Add prefix to String.Department is an attribute, not a string.
https://learn.microsoft.com/en-us/entra/identity/users/groups-naming-policy
HOTSPOT (Drag and Drop is not supported)You have a Microsoft Entra tenant that contains the users shown in the following table.The tenant contains the groups shown in the following table.Which users and groups can be deleted? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: User1, User2, User3, and User4. UsersAll users can be deleted.Box 2: Group1 and Group3 only GroupsYes - Group1 has no license.No - Group2 is assigned a license Yes - Group3 has no license.No - Group4 is assigned a license.
HOTSPOT (Drag and Drop is not supported)You have an Azure subscription that contains the resources shown in the following table.You plan to use an Azure key vault to provide a secret to app1.What should you create for app1 to access the key vault, and from which key vault can the secret be used? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
Box 1: Managed identity Create a:Reference secret from Key VaultWhen you define a secret, you create a reference to a secret stored in Azure Key Vault. Container Apps automatically retrieves the secret value from Key Vault and makes it available as a secret in your container app.To reference a secret from Key Vault, you must first enable managed identity in your container app and grant the identity access to the Key Vault secrets.Box 2: Vault1 and Vault2 only. Use secret from:Vault1 and Vault2 is in the same Resource Group as app1. Reference:https://learn.microsoft.com/en-us/azure/container-apps/manage-secrets
You have a Microsoft Entra tenant named contoso.com.You collaborate with an external partner named fabrikam.com.You plan to invite users in fabrikam.com to the contoso.com tenant.You need to ensure that invitations can be sent only to fabrikam.com users. What should you do in the Microsoft Entra admin center?
Microsoft Entra External ID, Configure external collaboration settingsExternal collaboration settings let you specify what roles in your organization can invite external users for B2B collaboration. These settings also include options for allowing or blocking specific domains, and options for restricting what external guest users can see in your Microsoft Entra directory. The following options are available:Allow or block domains: You can use collaboration restrictions to allow or deny invitations to the domains you specify.You can use an allowlist or a blocklist to allow or block invitations to B2B collaboration users from specific organizations. For example, if you want to block personal email address domains, you can set up a blocklist that contains domains like Gmail.com and Outlook.com. Or, if your business has a partnership with other businesses like Contoso.com, Fabrikam.com, and Litware.com, and you want to restrict invitations to only these organizations, you can add Contoso.com, Fabrikam.com, and Litware.com to your allowlist.* Etc. Reference:https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure https://learn.microsoft.com/en-us/entra/external-id/allow-deny-list
You have an Azure subscription that contains a storage account named storage1. The storage1 account contains blob data.You need to assign a role to a user named User1 to ensure that the user can access the blob data in storage1. The role assignment must support conditions.Which two roles can you assign to User1? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one point.
Answer(s): D,E
Post your Comments and Discuss Microsoft AZ-104 exam prep with other Community members:
Our website is free, but we have to fight against AI bots and content theft. We're sorry for the inconvenience caused by these security measures. You can access the rest of the AZ-104 content, but please register or login to continue.