AZ-104 Mock Exam & Practice Tests

The correct answer is A: From the Licenses blade of Azure AD (Microsoft Entra ID), assign a license. Detailed Explanation: • Why A is correct: In Microsoft Entra ID (formerly Azure AD), features included in Premium P1 and P2 tiers require active license assignment. To grant 10 users access to all Azure AD Premium P2 features (such as Privileged Identity Management and Identity Protection), an administrator must navigate to Microsoft Entra admin center / Azure portal > Billing / Licenses > All products, select the Azure AD Premium P2 license plan, and assign the licenses directly to the 10 target user accounts (or configure group-based license assignment). • Why B is incorrect: The Groups blade on an individual user profile allows adding that user to security groups, but simply adding users to a group does not activate Premium features unless group-based licensing has already been pre-configured on that group. • Why C is incorrect: Adding an enterprise application configures single sign-on (SSO) and access permissions for SaaS or internal applications; it does not assign user-level Azure AD Premium tenant feature licenses. • Why D is incorrect: Directory roles (such as Global Administrator or User Administrator) define administrative privileges within the directory, but they do not assign product licenses. Administrators and users alike still require assigned licenses to use Premium P2 capabilities. Official Reference: Microsoft Learn: Assign or remove licenses in the Microsoft Entra admin center https://learn.microsoft.com/en-us/entra/identity/users/licensing-groups-assign Verification Date: October 2026.

The correct answer is C: Deploy the IT Service Management Connector (ITSM). Explanation: The IT Service Management Connector (ITSMC) provides a bi-directional connection between Azure Monitor (and Log Analytics) and supported IT Service Management (ITSM) solutions, including Microsoft System Center Service Manager (SCSM), ServiceNow, and BMC Helix. By deploying ITSMC, Azure metric alerts, Activity Log alerts, and Log Analytics alerts can automatically generate work items and incidents in System Center Service Manager. • Why C is correct: To feed alerts from Azure Monitor into an on-premises System Center Service Manager deployment, the initial prerequisite is deploying and configuring the IT Service Management Connector. • Why A and B are incorrect: Automation runbooks and Function apps can execute automated tasks or custom scripts, but they are not the built-in Azure connector designed for direct System Center Service Manager alert synchronization. • Why D is incorrect: Creating an Azure notification or action group alone cannot connect directly to on-premises SCSM without a connector or webhook integration. Product Support Status & Verification Hold: Microsoft Learn documents that the legacy ITSMC connector for on-premises System Center Service Manager is a legacy integration architecture. Modern Azure integrations favor secure webhooks, Logic Apps, and Event Grid for custom ITSM pipelines. The item is retained for historical accuracy under AZ-104 monitoring objectives. Reference: https://learn.microsoft.com/en-us/azure/azure-monitor/alerts/itsmc-overview Verification Date: October 2026.

The correct answer is A: Device settings from the Devices blade. Detailed Explanation: When a Windows computer is joined to Microsoft Entra ID (formerly Azure AD), Microsoft Entra adds the following security principals to the local Administrators group on the device: 1. The Microsoft Entra Global Administrator role 2. The Microsoft Entra Device Administrator role 3. The specific user performing the Microsoft Entra join To grant a designated user (admin1@contoso.com) administrative rights across all Microsoft Entra joined computers without making them a tenant-wide Global Administrator, you configure the "Additional local administrators on Microsoft Entra joined devices" setting. Portal Path: 1. Sign in to the Microsoft Entra admin center or Azure portal. 2. Navigate to Microsoft Entra ID > Devices. 3. Select Device settings. 4. Under "Additional local administrators on Microsoft Entra joined devices", select "Manage Additional local administrators" and add the user. • Why B is incorrect: MFA Server provider settings configure multi-factor authentication server infrastructure, not local workstation administrative groups. • Why C is incorrect: User settings configure user-level directory options (such as access to the Azure portal and LinkedIn integrations), not device administrative privileges. • Why D is incorrect: Group settings manage security and Microsoft 365 group creation policies, not local device administrators. Official Reference: Microsoft Learn: How to manage local administrators on Microsoft Entra joined devices https://learn.microsoft.com/en-us/entra/identity/devices/assign-local-admin Verification Date: October 2026.