Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam

Exam AZ-104 topic 2 question 70 discussion

Actual exam question from Microsoft's AZ-104
Question #: 70
Topic #: 2
[All AZ-104 Questions]

HOTSPOT
-

You have an Azure AD tenant named contoso.com.

You have two external partner organizations named fabrikam.com and litwareinc.com. Fabrikam.com is configured as a connected organization.

You create an access package as shown in the Access package exhibit. (Click the Access package tab.)



You configure the external user lifecycle settings as shown in the Lifecycle exhibit. (Click the Lifecycle tab.)



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
PlaceboC6
Highly Voted 1 year, 7 months ago
N - Because not Connected Y - Because when it expires it is removed from the group. Proof to follow Y - Because..math https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources When a user's access package assignment expires, they are removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team.
upvoted 134 times
a6bd45e
2 months, 3 weeks ago
Regarding the first statement: The package is set so those from organization that is not connected cannot request to be added. Does it mean they cannot be assigned (by Owner for example)? The package defines "cannot request access". The statement says "can be assigned".
upvoted 2 times
...
3c5adce
4 months, 3 weeks ago
Confirmed
upvoted 1 times
...
AK4U_111
1 year, 7 months ago
After reading this article, i would say NYY is correct. Thank you
upvoted 9 times
...
Indy429
9 months, 3 weeks ago
But this example states that the users will not immediately be removed after the expiration of their access package. This will happen after 30 days of expiration, which would be after 395 days, not 365 days. In this case if you base it of off the example, the answers should be N N Y Comprehensive reading is just as important as technical knowledge guys.
upvoted 15 times
rnd3131
8 months, 3 weeks ago
the group 1 will be removed directly after 365 day, the EXT USER will be removed from the DIRECTORY (tenant) after 395 days. as described in the article of PlaceboC6: When a user's access package assignment expires, they're removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team.
upvoted 5 times
...
...
...
Ruby1133299
Highly Voted 1 year, 9 months ago
N not a connected organisation N expired not remove Y 365 + 30 = 395 removed
upvoted 96 times
RougePotatoe
1 year, 8 months ago
Why don't people cite their sources. so we know for sure that expired isn't the same as removed.
upvoted 4 times
RougePotatoe
1 year, 8 months ago
I mis-read the question. I still wish people would cite their sources though.
upvoted 6 times
...
...
Indy429
9 months, 3 weeks ago
This is the right answer If Q2 said "EXPIRE" it would be Yes, but it said "REMOVE" which will only happen 30 days after expiring
upvoted 1 times
...
...
behradcld
Most Recent 1 month ago
I think the answer is correct: Yes: Because users can be assigned but they can not request No: Because expired not removed Yes: correct after 395 will be removed
upvoted 1 times
...
SeMo0o0o0o
1 month ago
WRONG No No Yes
upvoted 1 times
...
varinder82
4 months, 3 weeks ago
Final Answer: N not a connected organisation N expired not remove Y 365 + 30 = 395 removed
upvoted 3 times
...
3c5adce
4 months, 3 weeks ago
ChatGPT4 says No no no
upvoted 1 times
2fd1029
1 month, 1 week ago
We don't care what ChatGPT says. ChatGPT gets questions wrong all the time.
upvoted 4 times
...
...
SkyZeroZx
9 months ago
1.- N : Because not has a permissons 2.- N : Because is expired not delete 3.-Y : Because 365 + 30 to delete/remove is correct The answer https://www.youtube.com/watch?v=J136cq9r0u8&list=PLlKA5U_Yqgof3H0YWhzvarFixW9QLTr4S&index=53
upvoted 12 times
Jedi_sg2000
3 months, 1 week ago
that make sense!
upvoted 1 times
...
...
hebbo777
10 months, 4 weeks ago
N N : "When a user's access package assignment expires, they're removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team" .. https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources Y - 365+30 = 395 deleted.
upvoted 3 times
...
katrvintraiz
11 months ago
The answer https://www.youtube.com/watch?v=J136cq9r0u8&list=PLlKA5U_Yqgof3H0YWhzvarFixW9QLTr4S&index=53
upvoted 8 times
...
ziggy1117
11 months, 1 week ago
N N - When a user's access package assignment expires, they're removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team. https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-resources#add-a-group-or-team-resource-role Y
upvoted 1 times
ziggy1117
11 months ago
sorry should be N-Y-Y
upvoted 4 times
...
...
amsioso
11 months, 1 week ago
N,N,Y https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-external-users#manage-the-lifecycle-of-external-users
upvoted 2 times
anyidea
4 months, 1 week ago
By default, when an external user no longer has any access package assignments, they're blocked from signing in to your directory. After 30 days, their guest user account is removed from your directory.
upvoted 1 times
...
...
Series_0011
12 months ago
N Y - Group membership is only maintained after losing access to the access package if it was previously in the group before being assigned to the access package or if they are assigned to another access package that also includes that group or team. When access expires they are removed from the group or team. Y https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources
upvoted 4 times
...
skeleto11
1 year ago
NO - Not connected NO - It is not removed from the group when their access package assignment is removed, they remain in the resource role. For example, if a user was a member of a group, and was assigned to an access package that included group membership for that group as a resource role, and then that user's access package assignment was removed, the user would retain their group membership. https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources Y - 365+30 = 395 deleted.
upvoted 1 times
alexandrud
11 months, 3 weeks ago
The answer for the second question should be YES - "When a user's access package assignment expires, they're removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team." -> Source of the explanation is your link: https://learn.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-access-package-resources
upvoted 4 times
itismadu
3 weeks ago
From the link "When a user's access package assignment expires, they're removed from the group or team, unless they currently have an assignment to another access package that includes that same group or team" https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-resources sO IT SHOULD BE n y y
upvoted 1 times
...
...
...
mandogrogus
1 year ago
NNY makes sense, but why is Y marked with red in 1 ?
upvoted 1 times
...
oopspruu
1 year, 1 month ago
It is NYY. N - Not a connected organization Y - After 365 days, the access package expires. If you read the description of "Manage Lifecycle" carefully, the removal part needs the expiration to go on for at least 30 days. Which means: Y - 365+30 = 395 Days == Removal
upvoted 3 times
...
gachocop3
1 year, 2 months ago
NNY 1- Not a connected organization 2. Expired no remove 3. 365 + 30 = 395 = removed
upvoted 7 times
...
Kr1s
1 year, 2 months ago
Q was in exam 29th July 2023
upvoted 6 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...