Exam AZ-900 topic 1 question 100 discussion

-2 is yes. Here's the reference: https://docs.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

Correct Anwser

1. An Azure subscription can be associated to multiple Azure Active Directory (Azure AD) tenants. No. An Azure subscription can only be associated with one Azure AD tenant at a time. 2. You can change the Azure Active Directory (Azure AD) tenant to which an Azure subscription is associated. No. Once an Azure subscription is associated with an Azure AD tenant, it cannot be changed. 3. When an Azure subscription expires, the associated Azure Active Directory (Azure AD) tenant is deleted automatically. No. The Azure AD tenant is not deleted when the subscription expires. The subscription is simply deactivated.

Yes I agree The answer 2 it´s Correct

This is correct. No, Yes, No

On Exam Jun/24

Update: Transferring an Azure subscription to a different Microsoft Entra directory is a complex process that must be carefully planned and executed. Many Azure services require security principals (identities) to operate normally or even manage other Azure resources. https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

Question # 100 - Keep on going! Prepare good :D

2 - "you can change the Azure Active Directory (Azure AD) tenant to which an Azure subscription is associated." -> This is a NO. Tenant can not be changed. AAD resources and configurations can be migrated or "transferred". So, AAD itself can not change the owner, only its definitions and data can be copy-pasted to another, new or existing tenant. https://learn.microsoft.com/en-us/azure/role-based-access-control/transfer-subscription

N YES N

When a subscription expires, the trusted instance of the Azure AD service remains, but the security principals lose access to Azure resources. Subscriptions can only trust a single directory while one Azure AD may be trusted by multiple subscriptions. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory

No, an Azure subscription cannot be directly associated with multiple Azure Active Directory (AD) tenants. A subscription can only be associated with a single Azure AD tenant at a time. During the creation of an Azure subscription, you specify the Azure AD tenant that will be associated with it, and this association cannot be changed later.

The answer for this is N Y N

Yet another poorly worded question. A subscription is associated with the AAD itself. A single AAD can have multiple tenants. But the first question is NO because it is implying there are multiple AADs. A single AAD with multiple tenants, and the answer is YES. Similarly, the second question is YES because they are saying you can change the subscription to a different AAD. Putting the word "tenant" in the question is confusing and ambiguous. "An Azure subscription can be associated to multiple Azure ADs." "You can change the Azure AD to which an Azure subscription is associated." Tenants is irrelevant. Typical Microsoft.

No Yes No

in the learning pathway ther eis no connection established between Azure AD and subscription. this way there is no limit to question that get asked even for fundamental exam. Am I being too synical or anybody else feels the same?

When you associate a subscription with a different directory, users that have roles assigned using Azure role-based access control lose their access. Classic subscription administrators, including Service Administrator and Co-Administrators, also lose access. Moving your Azure Kubernetes Service (AKS) cluster to a different subscription, or moving the cluster-owning subscription to a new tenant, causes the cluster to lose functionality due to lost role assignments and service principal's rights. For more information about AKS, see Azure Kubernetes Service (AKS). https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory