You are the system administrator of a large organization that has recently decided to add an Azure AD subscription. Your boss has asked you about Azure security and making sure that user logins are secure. What feature can you explain to your boss to ease their concerns? A. Azure AD User Security B. Azure AD Identity Protection C. Azure AD Security add-o n D. Azure Identity Protection
You want to create a new Azure AD policy for your users. What PowerShell command would you use to accomplish this task? A. New- AzurePolicy B. New- AzureActiveDirectoryPolicy C. Set- AzurePolicy D. New- AzureADPolicy
You want to look at an Azure AD policy for your users. What PowerShell command would you use to accomplish this task? A. Get- AzureADPolicy B. Get- AzurePolicy C. View- AzurePolicy D. View- AzureADPolicy
You are the administrator for a large organization that has subscribed to a new Azure AD subscription. You want your users to be able to reset passwords themselves. What Azure AD feature allows this to happen? A. User- enabled password resets B. Azure password reset feature C. Self- service password reset D. Password reset service
You are the new Azure AD Global Administrator for your organization. Your company wants to set up a way to integrate their onsite AD with Azure AD. What tool can you use to do this? A. Site- to- site VPN gateway connectors B. Azure AD Connect C. Azure AD Replication D. Active Directory Replicator
You want to look at an Azure AD application policy for your users’ applications. What PowerShell command would you use to accomplish this task? A. Add- AzureADPolicy B. Add- AzureADApplicationPolicy C. Create- AzurePolicy D. Install- AzureADPolicy
You want to change an Azure Active Directory policy for your users. What PowerShell command would you use to accomplish this task? A. New- AzureADPolicy B. Edit- AzureADPolicy C. New- AzurePolicy D. Set- AzureADPolicy
You are the new Azure AD Global Administrator for your organization. Your company has an Azure AD domain name of ContosoAzure.onmicrosoft.com. Your bosses want you to change the default domain name to Contoso.onmicrosoft.com. How can you change the initial domain name? A. Use the Custom Domain Names section of Azure AD and change the name. B. In Azure AD, go to default directories and change the domain name. C. Use PowerShell to change the default domain name. D. This can’t be done.
You are the new Azure AD Global Administrator for your organization. Your company has an Azure AD domain name of ContosoAzure.onmicrosoft.com. Your bosses want you to add a new domain name for Contoso.onmicrosoft.com. How can you add the new domain name to your existing domain? A. Use the Custom Domain Names section of Azure AD and change the name. B. In Azure AD, go to default directories and add the domain name. C. Use the Azure Administrative Center to add the new domain name. D. This can’t be done.
You want to view your Azure AD directory settings for your Azure AD subscription. What PowerShell command would you use to accomplish this task? A. View- AzureADDirectorySetting B. Get- AzureADDirectorySetting C. Add- AzureADDirectorySetting D. Set- AzureADDirectorySetting
You are the administrator for your company network. You want to look at an Azure AD application policy for your users’ applications. What PowerShell command should you use? A. Add- AzureADPolicy B. Get- AzureADApplicationPolicy C. Create- AzurePolicy D. Install- AzureADPolicy
You are the administrator for your company network. You have 20 Windows client computers that are joined to Azure AD. You have a Microsoft 365 subscription. You are planning to replace these computers with new computers that also run Windows 10/11. The new computers will be joined to Azure AD. What should you configure if you need to ensure that the desktop background, the Favorites, and the browsing history are available on the new computers? A. You should configure Enterprise State Roaming. B. You should configure Folder Redirection. C. You should configure system settings. D. You should configure roaming user profiles.
You are the administrator for your company network. You and a colleague are discussing different authentication methods. Which one of the following tools allows for the use of security questions? A. Azure AD Self-S ervice Password Reset (SSPR). B. Azure Multifactor Authentication (Azure MFA). C. Password Manager (PassMgr). D. This can’t be done.
You are the administrator for your company network. You have an Azure AD tenant. All corporate devices are enrolled. You have a web- based application that uses Azure AD to authenticate. What should you configure if you need to prompt all users of the application to agree to the protection of corporate data when they access the app from both corporate and noncorporate devices? A. You should configure notifications in Device Compliance. B. You should configure Terms and Conditions in Device Enrollment. C. You should configure Terms of Use in Conditional Access. D. You should configure an Endpoint Protection Profile in Device Configuration.
You are the administrator for your company network. You need to ensure that when managers join Azure AD that their computers are enrolled automatically into Mobile Device Management (MDM). What tool should you use to do this? A. The Configuration Manager console B. The Group Policy Management Editor C. The Azure portal D. The Microsoft Intune portal
You are the administrator for your company network. You and a colleague are discussing conditional access policies and how to set one up. One section of the conditional access policy controls the who, what, and where of the conditional access policy. What section is being discussed? A. Access Controls B. Admission Control C. Assignments D. Tasks
You are the administrator for your company network. You and a colleague are discussing a feature used by Azure AD to bring together signals, to make decisions, and to enforce organizational policies. What is this tool called? A. Conditional access B. Device access C. Microsoft Cloud App Security (MCAS) D. Microsoft Empowerment
You are the administrator for your company network. You and a colleague are discussing the ability of Windows 10/11 Azure AD users to roam their profile data between multiple devices, allowing the user and app settings to sync between the devices regardless of where the user is located. What is this called? A. Azure Readiness Roaming B. Enterprise State Roaming C. Mandatory User Profile D. Roaming User Profile
You are the administrator for your company network. You and a colleague are discussing a tool that allows an organization to automate the detection and remediation of identity- based risks. What is this tool called? A. Azure AD User Security B. Azure AD Identity Protection C. Azure AD Security add-o n D. Azure Identity Protection
You are the administrator for your company network. You and a colleague are discussing roles and permissions. You are using Azure AD and you want to assign permissions to users for maintaining conditional access. What role should you assign to the users if you’d like them to be able to view, create, modify, and delete conditional access policies? A. The Application Administrator role B. The Compliance Administrator role C. The Conditional Access Administrator role D. The Conditional Admission Administrator role