Prepstellar

AZ-104 · Practice set 5 of 7

Microsoft Entra Users and External Identities: 10 practice questions

10 questions · Untimed · Free

10 free AZ-104 practice questions on Microsoft Entra Users and External Identities, with an explanation for every answer. Untimed. The full mock exam and the timed version are in the app.

Set 5 · Microsoft Entra Users and External Identities · 10 questions Read the lesson
  1. Question 1 of 10

    Which Microsoft Entra admin center action starts creation of a cloud user?

    1. AGroups > New group starts group creation.
    2. BOpen Directory + Subscription, select a directory, and then choose Switch.
    3. COpen Users, select New user, and then select Create new user.
    4. DOpen Deleted users, select Restore user, and then confirm the dialog.
    Show the answer

    User creation begins from the Users surface; the other paths manage groups, deleted accounts, or directory context.

    Next → 1 / 10
  2. Question 2 of 10

    Which field is part of the Microsoft Entra user creation form?

    1. AUser principal name
    2. BDirectory source
    3. CUser Type column
    4. DGroup membership type
    Show the answer

    User principal name is entered on the user creation form; the alternatives describe group configuration or identity classification.

    Next → 2 / 10
  3. Question 3 of 10

    Which action starts the lifecycle of a new external collaborator in Microsoft Entra ID?

    1. ACreate a synchronized member account in the external user's directory.
    2. BInvite the external user and send or provide the invitation redemption link.
    3. CAssign a license before creating an external user object.
    4. DConvert every external identity into a service principal.
    Show the answer

    Inviting the collaborator creates the external user object. The user then redeems the invitation and authenticates with the permitted external identity.

    Next → 3 / 10
  4. Question 4 of 10

    A user originates in on-premises Active Directory and is synchronized to Microsoft Entra ID. Which identity classification and source apply?

    1. ACloud identity with External Microsoft Entra directory as its source
    2. BGuest user with Invited user as its source
    3. CDirectory-synchronized identity with Windows Server AD as its source
    4. DCloud identity with Microsoft Entra ID as its source
    Show the answer

    Origin in on-premises Active Directory defines a directory-synchronized identity and produces Windows Server AD as the displayed source.

    Next → 4 / 10
  5. Question 5 of 10

    What happens to a user account during the first 30 days after deletion?

    1. AIt is permanently deleted but can be recreated with all prior properties.
    2. BIt remains active for 30 days.
    3. CIt becomes a guest account and keeps access until an invitation expires.
    4. DIt remains suspended and can be restored with all its properties.
    Show the answer

    The deleted-user window preserves the suspended object and its properties for restoration; permanent deletion begins after that window.

    Next → 5 / 10
  6. Keep the ones you got wrong

    In the app, every question you miss comes back exactly when you’re about to forget it.

    Opens in your browser. Nothing to install.

    Start studying

    On your phone, with the same account

    Get it on Google Play Download on the App Store
  7. Question 6 of 10

    Where can an administrator correct a user's usage location before assigning a license?

    1. AOn the user's Properties tab in the Microsoft Entra admin center
    2. BIn the Deleted users restoration dialog in the Microsoft Entra admin center
    3. CIn the Directory + Subscription panel as the directory source
    4. DIn the group's Membership type setting in the Microsoft Entra admin center
    Show the answer

    Usage location is a user profile property and should reflect the user's actual location before licensing.

    Next → 6 / 10
  8. Question 7 of 10

    How should an administrator begin an operation that applies to several users in the All users list?

    1. ASelect the check boxes for the required users in the list.
    2. BSwitch directories once for every user included in the operation.
    3. COpen one user's page and add the other users as properties.
    4. DMove the users to Deleted users and restore them together.
    Show the answer

    List check boxes provide the multi-user selection surface, whereas opening a user page scopes management to that individual.

    Next → 7 / 10
  9. Question 8 of 10

    A contractor has redeemed an invitation and uses an identity from another organization. The engagement ends, and all access represented by the guest object must be removed. What should an administrator do?

    1. AChange the account's User type from Guest to Member and leave it in place.
    2. BResend the invitation so the contractor has to redeem it again before signing in.
    3. CDelete the guest user object from the resource tenant.
    4. DRemove the guest from every group and application assignment, leaving the account in the directory.
    Show the answer

    The guest object is the identity every assignment in this tenant hangs from, so removing the account is what takes all of that access with it. That single removal is what makes the guest pattern safe for temporary work.

    Next → 8 / 10
  10. Question 9 of 10

    A user account was deleted 25 days ago and must come back with all its original properties. The engineer handling the request holds a role that is not one of those allowed to restore users. What has to happen?

    1. AAn account with a permitted role, such as User Administrator, restores it from Deleted users.
    2. BThe engineer recreates the account with the same user principal name, which carries the original's properties.
    3. CAny administrator restores the account from All users, because Deleted users lists only permanently removed objects.
    4. DThe engineer waits for the thirty-day window to close, because permanent deletion returns the object to All users.
    Show the answer

    Two constraints decide this one. At day 25 the object is still suspended, so the original can be restored with everything it carried; and restoring is reserved to Global Administrator, Partner Tier-1 Support, Partner Tier-2 Support or User Administrator. Someone holding one of those roles has to act before day 30.

    Next → 9 / 10
  11. Question 10 of 10

    An administrator is currently viewing directory A, must update several users in directory B, and must avoid changing similarly named users in A. Which sequence meets both constraints?

    1. ASwitch to directory B, open one user page, and manage every matching user there.
    2. BOpen All users in directory A, select the names, and then switch to directory B.
    3. CSwitch to directory B, open All users, and select the required user check boxes.
    4. DStay in directory A, open one user page, and select users from both directories.
    Show the answer

    The admin center works in one directory at a time, so directory context must change first; list check boxes then provide multi-user selection.

    Next → 10 / 10
  12. You’ve finished this set

    That’s 10 questions on Microsoft Entra Users and External Identities. In the app the ones you miss come back exactly when you’re about to forget them.

    Back to the course Next lesson: Microsoft Entra Groups and Properties

    Opens in your browser. Nothing to install.

    Start studying

    On your phone, with the same account

    Get it on Google Play Download on the App Store

The whole course, on your computer and your phone

Lessons you can read, audio you can listen to on the way to work, and practice that remembers what you got wrong.

Opens in your browser. Nothing to install.

Start studying

On your phone, with the same account

Get it on Google Play Download on the App Store

“This app is the ‘One Lake’ for preparing the certification exams. Really worth it.”

Abdelhak Y. Google Play review