Practice Test 2 | AZ 104 | Dumps | Mock Test

You need to ensure that users can join devices to Azure AD. These users must be the members of the pilot Azure AD group. Which two settings do you need to modify to implement these requirements?

1. Users may join devices to Azure AD.
2. Additional local administrators on Azure AD joined devices.
3. Users may register their devices with Azure AD.
4. Require Multi-Factor Auth to join devices.

Answer – A and D

In the Case study, there are two requirements to join devices.

• There should be a pilot group so that the testing of devices joining Azure AD can be carried out.
• When users joined their own devices to Azure AD, they need to use a phone verification method to verify their

To fulfill the first requirement, we need to modify “Users may join devices to Azure AD” and select a pilot Azure AD group created earlier.

For the second requirement, we need to modify the “Require Multi-Factor Auth to join devices” settings and select a phone verification method.

The Microsoft documentation mentions the following to support this.

Users may register their devices with Azure AD – You need to con gure this setting to allow Windows 10 personal, iOS, Android, and macOS devices to be registered with Azure AD. If you select None, devices are not allowed to register with Azure AD. Enrollment with Microsoft Intune or Mobile Device Management (MDM) for O ce 365 requires registration. If you have con gured either of these services, ALL is selected and NONE is not available.

Require Multi-Factor Auth to join devices – You can choose whether users must provide an additional authentication factor to join their device to Azure AD. The default is No. We recommend requiring multi-factor authentication when registering a device. Before you enable multi-factor authentication for this service, you must ensure that multi-factor authentication is con gured to register their devices. For more information on di erent Azure multi-factor authentication services, see getting started with Azure multi-factor authentication.

Option B is incorrect since this is used for users granted local administrator rights on a device. Option C is incorrect since this setting is to allow devices to be registered with Azure AD.

For more information on device settings, please go to the below URL-

https:/ docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure- portal