Free AZ-104 Exam Braindumps
Microsoft Azure Administrator Questions 129–136 (page: 18)

Explanation:

Box 1: Properties
Enable self-service password reset (SSPR) for all users.
Enable self-service password reset
Microsoft Entra ID lets you enable SSPR for None, Selected, or All users.
Sign in to the Microsoft Entra admin center as at least an Authentication Policy Administrator.
2. Browse to Entra ID > Password reset from the menu on the left side.
*-> 3. From the Properties page, under the option Self service password reset enabled, choose Selected.
4. If your group isn't visible, choose No groups selected, browse for and select your Microsoft Entra group, like SSPR-Test-Group, and then choose Select.


5. To enable SSPR for the select users, select Save.
Box 2: Authentication methods
Require the users to answer four questions when registering for SSPR.
Select authentication methods and registration options
When users need to unlock their account or reset their password, they're prompted for another confirmation method. This extra authentication factor makes sure that Microsoft Entra ID finished only approved SSPR events. You can choose which authentication methods to allow, based on the registration information the user provides.
*-> 1. From the menu on the left side of the Authentication methods page, set the Number of methods required to reset to 2.
To improve security, you can increase the number of authentication methods required for SSPR.
2. Etc.

Reference:

https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr

Explanation:

Microsoft Cost Management allows you to track external partners' usage by utilizing tags on Azure resources. By applying tags related to partners, you can categorize and analyze costs associated with those partners.
Here's how to use tags in Microsoft Cost Management for external partner tracking:
Define a Tagging Strategy:
Create a consistent tagging strategy that includes a tag for external partners.
This tag can be a simple identifier like "PartnerName" or more descriptive names like "Partner-Development- Team".
Apply Tags to Resources:
When deploying Azure resources used by external partners, apply the defined partner tag.
This can be done manually through the Azure portal or using Azure Resource Manager (ARM) templates for automated deployment.
3. Analyze Costs using Cost Management

Reference:

https://learn.microsoft.com/en-us/azure/cost-management-billing/costs/overview-cost-management

Explanation:

Box 1: Selected
Only selected users should be able to join devices
Box 2: Yes
Ensure that when users join devices to Microsoft Entra ID, the users use a mobile phone to verify their identity.

Explanation:

Scenario:
Designate a new user named Admin1 as the service admin for the Azure subscription. Admin1 must receive email alerts regarding service outages.
Follow these steps to change the Service Administrator in the Azure portal.
1. Make sure your scenario is supported by checking the limitations for changing the Service Administrator.
2. Sign in to the Azure portal as the Account Administrator.
3. Open Cost Management + Billing and select a subscription.
4. In the left navigation, click Properties.
5. Click Service Admin.

Reference:

https://docs.microsoft.com/en-us/azure/role-based-access-control/classic-administrators

Explanation:

Reference:

https://docs.microsoft.com/en-us/azure/governance/policy/overview

Explanation:

Azure Files supports identity-based authentication over Server Message Block (SMB) through on-premises Active Directory Domain Services (AD DS) and Microsoft Entra Domain Services (DS).

Reference:

https://docs.microsoft.com/en-us/azure/storage/files/storage-files-active-directory-overview

Explanation:

Box 1: No
No - Admin1 can assign Attribute1 to Group1. Admin1 is Global Administrator.
Note: To assign or remove custom security attributes for a user in your Microsoft Entra tenant, you need:
* Attribute Assignment Administrator
* Etc.
Important
By default, Global Administrator and other administrator roles do not have permissions to read, define, or assign custom security attributes.
Note: Attribute Assignment Administrator
Users with this role can assign and remove custom security attribute keys and values for supported Microsoft Entra objects such as users, service principals, and devices.
By default, Global Administrator and other administrator roles do not have permissions to read, define, or assign custom security attributes. To work with custom security attributes, you must be assigned one of the custom security attribute roles.
For more information, see
Box 2: No
No - Admin2 can assign Attribute1 to User1
Admin2 is Attribute Definition Administrator. Box 3: Yes
Yes - Admin3 can assign Attribute1 to Group2. Admin3 is Attribute Assignment Administrator.
Scenario:
The adatum.com tenant has a custom security attribute named Attribute1.
Planned changes:
Assign Attribute1 to supported adatum.com resources.
ADatum has a Microsoft Entra tenant named adatum.com that is linked to the Azure subscription and contains the users shown in the following table.

Reference:

https://learn.microsoft.com/en-us/entra/identity/users/users-custom-security-attributes https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/permissions-reference#attribute- assignment-administrator

Explanation: