Exam AZ-104 topic 2 question 13 discussion

Correct Answer: A When you connect a Windows device with Azure AD using an Azure AD join, Azure AD adds the following security principles to the local administrators group on the device: ✑ The Azure AD global administrator role ✑ The Azure AD device administrator role ✑ The user performing the Azure AD join In the Azure portal, you can manage the device administrator role on the Devices page. To open the Devices page: 1. Sign in to your Azure portal as a global administrator or device administrator. 2. On the left navbar, click Azure Active Directory. 3. In the Manage section, click Devices. 4. On the Devices page, click Device settings. 5. To modify the device administrator role, configure Additional local administrators on Azure AD joined devices.

Correct you can specifically specify administrator roles on the devices through device settings in the Azure portal

Is mlantonis back or is someone playing a cruel joke?😂

A is corerct

A. Device settings from the Devices blade / Think: Computers in question = Devices To add a user as an administrator on all computers that will be joined to the Azure AD domain, you need to configure the device settings from the Devices blade in Azure AD. Here, you can set a policy to grant specific users administrative privileges on all Azure AD joined devices. This setting allows you to define who can manage the devices that are registered and joined to your Azure AD domain.

A

This answer is a possible way, its considered best practice regarding least privilege. However please not that all Global Admins are automatically administrators on the joined devices.

Configuring user settings from the Users blade in Azure AD will not allow you to add a user as an administrator on all the computers that will be joined to the Azure AD domain. To achieve this, you can use Azure AD device management and configure device settings from the Devices blade. Specifically, you can configure device settings to add a user as a local administrator on all devices joined to Azure AD. So the correct answer is A. Device settings from the Devices blad

To add a user as an administrator on all computers joined to the Azure AD domain, you should configure device settings from the Devices blade in Azure AD. Here's how to do it: 1. Sign in to the Azure portal with your Azure AD Premium P2 account. 2. Navigate to the Azure Active Directory blade. 3. Click on the Devices blade. 4. Select Device settings. 5. Under Additional local administrators on Azure AD joined devices, click Add. 6. In the Add additional administrators pane, type in the email address for the user you want to add as an administrator, in this case, [email protected]. 7. Click Save to add the user as an additional local administrator on all Azure AD joined devices. Note that this will only work for Azure AD joined devices, not for devices that are joined to other directory services or are not joined to any directory service.

answer A from azure portal --> azure active directory --> devices --> device settings --> manage additional local administrators on all azure ad joined devices --> add assignments --> select user/group as a local admin

A is correct

A) " Device settings from the Devices blade "

Correct Answer: A

A is correct

Device settings from the Devices blade

RESPOSTA A

A is correct