- (Exam Topic 4)
You have an Azure Active Directory (Azure AD) tenant.
You create an enterprise application collection named HR Apps that has the following settings:
• Applications: Appl. App?, App3
• Owners: Admin 1
• Users and groups: HRUsers
AH three apps have the following Properties settings:
• Enabled for users to sign in: Yes
• User assignment required: Yes
• Visible to users: Yes
Users report that when they go to the My Apps portal, they only sue App1 and App2-You need to ensure that the users can also see App3. What should you do from App3?
What should you do from App3?

1. A. From Users and groups, add HRUsers.
2. B. Prom Properties, change User assignment required to No.
3. C. From Permissions, review the User consent permissions.
4. D. From Single sign on, configure a sign-on method.

Correct Answer: A
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/assign-user-or-group-access-portal https://docs.microsoft.com/en-us/azure/active-directory/user-help/my-applications-portal-workspaces

- (Exam Topic 4)
You have an Azure Active Directory Premium P2 tenant. You create a Log Analytics workspace.
You need to ensure that you can view Azure Active Directory (Azure AD) audit log information by using Azure Monitor.
What should you do first?

1. A. Run the Set-AzureADTenantDetail cmdlet.
2. B. Create an Azure AD workbook.
3. C. Modify the Diagnostics settings for Azure AD.
4. D. Run the Get-AzureADAuditDirectoryLogs cmdlet.

Correct Answer: D
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/howto-integrate-activity-logs-with-lo

- (Exam Topic 2)
You create a Log Analytics workspace.
You need to implement the technical requirements for auditing. What should you configure in Azure AD?

1. A. Company branding
2. B. Diagnostics settings
3. C. External Identities
4. D. App registrations

Correct Answer: B
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/overview-monitoring

- (Exam Topic 4)
Your network contains an on-premises Active Directory domain named contoso.com. The domain contains the objects shown in the following table.

You install Azure AD Connect. You configure the Domain and OU filtering settings as shown in the Domain and OU Filtering exhibit. (Click the Domain and OU Filtering tab.)

You configure the Filter users and devices settings as shown in the Filter Users and Devices exhibit. (Click the Filter Users and Devices tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

Solution:
Graphical user interface, application Description automatically generated
Only direct members of Group1 are synced. Group2 will sync as it is a direct member of Group1 but the members of Group2 will not sync.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-custom

Does this meet the goal?

1. A. Yes
2. B. No

Correct Answer: A

- (Exam Topic 4)
You have an Azure AD tenant named Contoso that contains a terms of use (ToU) named Terms1 and an access package. Contoso users collaborate with an external organization named Fabrikam. Fabrikam users must accept Terms1 before being allowed to use the access package. You need to identify which users accepted or declined Terms1. What should you use?

1. A. provisioning logs
2. B. the Usage and Insights report
3. C. sign-in logs
4. D. audit logs

Correct Answer: D