You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named and an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports that she is unable to grant access to AKS1 to the users in .You need to ensure that access to AKS1 can be granted to the ...
AZ-104
You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named
contoso.com and an Azure Kubernetes Service (AKS) cluster named AKS1.An administrator reports that
she is unable to grant access to AKS1 to the users in contoso.com.You need to ensure that access to
AKS1 can be granted to the contoso.com users. What should you do first?
A. From contoso.com, modify the Organization relationships settings.
B. From contoso.com, create an OAuth 2.0 authorization endpoint.
C. Recreate AKS1.
D. From AKS1, create a namespace. - correct answer Correct Answer: B
You have a Microsoft 365 tenant and an Azure Active Directory (Azure AD) tenant named
contoso.com.You plan to grant three users named User1, User2, and User3 access to a temporary
Microsoft SharePoint document library named Library1.You need to create groups for the users. The
solution must ensure that the groups are deleted automatically after 180 days.Which two groups should
you create? Each correct answer presents a complete solution.NOTE: Each correct selection is worth one
point.
A. an Office 365 group that uses the Assigned membership type
B. a Security group that uses the Assigned membership type
C. an Office 365 group that uses the Dynamic User membership type
D. a Security group that uses the Dynamic User membership type
E. a Security group that uses the Dynamic Device membership type - correct answer AC
You can set expiration policy only for Office 365 groups in Azure Active Directory (Azure AD).Note: With
the increase in usage of Office 365 Groups, administrators and users need a way to clean up unused
groups. Expiration policies can help remove inactive groups from the system and make things
cleaner.When a group expires, all of its associated services (the mailbox, Planner, SharePoint site, etc.)
are also deleted.You can set up a rule for dynamic membership on security groups or Office 365
, groups.Incorrect Answers:B, D, E: You can set expiration policy only for Office 365 groups in Azure Active
Directory (Azure AD).Reference:https://docs.microsoft.com/en-us/office365/admin/create-groups/
office-365-groups-expiration-policy?view=o365-worldwide
You recently created a new Azure subscription that contains a user named Admin1.Admin1 attempts to
deploy an Azure Marketplace resource by using an Azure Resource Manager template. Admin1 deploys
the template by using AzurePowerShell and receives the following error message: "User failed validation
to purchase resources. Error message: "Legal terms have not been accepted for this item on this
subscription. To accept legal terms, please go to the Azure portal (http://go.microsoft.com/fwlink/?
LinkId=534873) and configure programmatic deployment for the Marketplace item or create it there for
the first time."You need to ensure that Admin1 can deploy the Marketplace resource successfully.What
should you do?
A. From Azure PowerShell, run the Set-AzApiManagementSubscription cmdlet
B. From the Azure portal, register the Microsoft.Marketplace resource provider
C. From Azure PowerShell, run the Set-AzMarketplaceTerms cmd - correct answer Correct Answer: C
You have an Azure Active Directory (Azure AD) tenant that contains 5,000 user accounts.You create a
new user account named AdminUser1.You need to assign the User administrator administrative role to
AdminUser1.What should you do from the user account properties?
A. From the Licenses blade, assign a new license
B. From the Directory role blade, modify the directory role
C. From the Groups blade, invite the user account to a new group - correct answer Correct Answer: B
Assign a role to a user -1. Sign in to the Azure portal with an account that's a global admin or privileged
role admin for the directory.2. Select Azure Active Directory, select Users, and then select a specific user
from the list.3. For the selected user, select Directory role, select Add role, and then pick the
appropriate admin roles from the Directory roles list, such as Conditional access administrator.4. Press
Select to save.Reference:https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-
directory-users-assign-role-azure-portal
The benefits of buying summaries with Stuvia:
Guaranteed quality through customer reviews
Stuvia customers have reviewed more than 700,000 summaries. This how you know that you are buying the best documents.
Quick and easy check-out
You can quickly pay through credit card or Stuvia-credit for the summaries. There is no membership needed.
Focus on what matters
Your fellow students write the study notes themselves, which is why the documents are always reliable and up-to-date. This ensures you quickly get to the core!
Frequently asked questions
What do I get when I buy this document?
You get a PDF, available immediately after your purchase. The purchased document is accessible anytime, anywhere and indefinitely through your profile.
Satisfaction guarantee: how does it work?
Our satisfaction guarantee ensures that you always find a study document that suits you well. You fill out a form, and our customer service team takes care of the rest.
Who am I buying these notes from?
Stuvia is a marketplace, so you are not buying this document from us, but from seller Rechga. Stuvia facilitates payment to the seller.
Will I be stuck with a subscription?
No, you only buy these notes for $12.99. You're not tied to anything after your purchase.
