FREE Microsoft Identity and Access Administrator v1.0 Questions and Answers

Question 1

There is a user named User1 in your Azure Active Directory (Azure AD) tenant. You must make sure User1 can add resources to the catalogs they possess and build new ones.
What ought you to do?

Accepted Answer

From the Identity Governance blade, modify the Entitlement management settings

Answer

From the Roles and administrators blade, modify the Service support administrator role

Answer

From the Roles and administrators blade, modify the Groups administrator role

Answer

From the Identity Governance blade, modify the roles and administrators for the General catalog

Question 2

An Azure Active Directory (Azure AD) tenant and an on-premises Active Directory domain are both present in your network. Users log in to Windows 10 PCs that are joined to the domain. You want to use Seamless Single Sign-On with Azure AD (Azure AD Seamless SSO). The Windows 10 computers must be set up to enable Azure AD Seamless SSO.

Accepted Answer

Configure Sign-in options from the Settings app.

Answer

Enable Enterprise State Roaming.

Answer

Install the Azure AD Connect Authentication Agent.

Answer

Modify the Local intranet Zone settings.

Question 3

The users listed in the following table are part of an Azure Active Directory (Azure AD) tenant that belongs to you.

You have an administrative unit named Au1. Group1, User2, and User3 are members of Au1.

For which users can User5 reset passwords?

Accepted Answer

User2 and User3 only

Answer

User3 and User4 only

Answer

User1, User2, and User3

Answer

User1 and User2 only

Question 4

You have a user named User1 in your Azure AD tenant. User1 needs to manage license assignments and reset user passwords.
Which role should you assign to User1?

Accepted Answer

User administrator

Answer

Helpdesk administrator

Answer

Billing administrator

Answer

License administrator

Question 5

Microsoft Office 365 Enterprise E3 licenses are given to 2,500 users. Individual users are given the licenses. You can provide all users in a group the Microsoft Office 365 Enterprise E5 licenses from the Groups blade in the Azure Active Directory admin center. The users' Office 365 Enterprise E3 licenses must be removed with the least amount of administrative work possible. What should you use?

Accepted Answer

The Administrative units blade in the Azure Active Directory admin center

Answer

The Set-MsolUserLicense cmdlet

Answer

The Set-AzureADGroup cmdlet

Answer

The Set-WindowsProductKey cmdlet

Question 6

Microsoft Office 365 Enterprise E3 licenses are given to 2,500 users. Individual users are given the licenses. You can give all of the users' licenses for Microsoft 365 Enterprise E5 from the Groups blade in the Azure Active Directory admin center. The users' Office 365 Enterprise E3 licenses must be removed with the least amount of administrative work possible. What should you use?

Accepted Answer

The Identity Governance blade in the Azure Active Directory admin center

Answer

The Set-MsolUserLicense cmdlet

Answer

The Set-AzureADGroup cmdlet

Answer

The Set-WindowsProductKey cmdlet

Question 7

You have an Azure AD tenant that is synced with your Active Directory forest.
You learn that for up to 30 minutes after an Active Directory user account is disabled, the disabled user can still authenticate to Azure AD.
When a user account is disabled in Active Directory, you must make sure that it is instantly barred from logging in to Azure AD.

Solution: You configure conditional access policies.
Does this meet the goal?

Accepted Answer

No

Answer

Yes