Exam AZ-900 topic 1 question 295 discussion

N, you do it with Azure Active Directory Domain Services (Azure AD DS) Y, N, you can REGISTER Windows 10, iOS, Android, and MacOS devices, NOT JOIN them - https://docs.microsoft.com/en-us/azure/active-directory-domain-services/manage-group-policy - https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-join - https://docs.microsoft.com/en-us/azure/active-directory/devices/concept-azure-ad-register

Azure AD DS is a feature of Azure AD. You guys are splitting atoms here. Answers should be YYN

It appears the published answer to this question in this guide is wrong - It should be YYY, per this link the last answer is Y -

make up your minds for heaven's sake! How I wish there is a moderator that can confirm the correct answer or at least make sure the published answers are consistent throughout this guide!

NYN is correct acc to ChatGPT

The correct answer here is NYN. GP is not supported in Azure AD. Windows 10 can JOIN Android can be REGISTERED but not JOIN

keyword "Android", most of the time for Azure, it is no.

No - Group policies are a feature of Active Directory on-premises, not Azure AD. However, Azure AD does support conditional access policies and other similar features. Yes - You can join Windows 10 devices to Azure AD. No - You cannot directly join Android devices to Azure AD like you can with Windows 10 devices. However, you can manage Android devices using Microsoft Intune, which integrates with Azure AD.

NYN MS definition of joined and registered is confusing. https://learn.microsoft.com/en-us/entra/identity/devices/concept-device-registration "Registered to Microsoft Entra ID without requiring organizational account to sign in to the device" this supports android https://learn.microsoft.com/en-us/entra/identity/devices/concept-directory-join "Joined only to Microsoft Entra ID requiring organizational account to sign in to the device" no android here.

No Yes Yes

the last question is YES. An Android device can be both registered and joined to Azure Active Directory (Azure AD), depending on the management and integration requirements of your organization

I'll go with NYN.

NYN The statements don't state AAD DS for group policy or Workplace Join for adding Android devices. It simply states AAD.

You can create Group Policies in Azure Active Directory (Azure AD). - No, Azure Active Directory itself does not directly support creating Group Policies. This is done through Azure Active Directory Domain Services (Azure AD DS), which provides domain services such as domain join, group policy, LDAP, and Kerberos/NTLM authentication that are fully compatible with Windows Server Active Directory. You can join Windows 10 devices to Azure Active Directory (Azure AD). - Yes, Windows 10 devices can be Azure AD joined to provide seamless SSO capabilities, access to cloud and on-premises resources, and easier device management. You can join Android devices to Azure Active Directory (Azure AD). - No, Android devices cannot be "joined" to Azure AD in the same way Windows devices can be. They can be registered in Azure AD, which provides identity as a service with support for Android, iOS, and other platforms for single sign-on, conditional access, and self-service capabilities across apps.

seems the answer here is YYY

No Yes Yes Azure Active Directory (Azure AD) does not support the creation of Group Policies in the same way that on-premises Active Directory (AD) does. Group Policies, as they are traditionally understood, are used to manage and enforce settings on Windows-based devices within an on-premises AD environment.

Correct answer is NYY Azure AD does not support GPs in a similar way as windows active directory, you need Azure AD DS which is a separate service from Azure AD, and requires additional configuration and setup. Also, AAD DS is not included with every Azure subscription, so you'll need to check if it's available in your subscription before you can use it. To join an Android device to Azure AD using Microsoft Intune or Azure AD Device Management, you must first set up a device enrollment profile and configure the necessary settings to enable Azure AD Join. Once the device is enrolled and joined to Azure AD, you can manage the device and apply policies and configurations to ensure secure access to your organization's resources.