az-104 Practice Question 1694
Exam: az-104
Domain: Manage Azure identities and governance
Topic: Manage Microsoft Entra ID
Difficulty: medium
Contoso Ltd wants to ensure that only users from specific departments can access certain resources in their Azure environment. How should they configure this using Microsoft Entra ID and Azure Active Directory (AAD)?
Answer Options
A
Assign Azure roles to individual users based on their job titles.
B
Create Azure AD groups based on departmental affiliations and assign these groups to resources.
C
Use Azure roles to manage access control for different resources.
D
Set up custom attributes for users to indicate their departmental affiliations.
Correct Answer
B: Create Azure AD groups based on departmental affiliations and assign these groups to resources.
Explanation
The correct answer is B. To ensure that only users from specific departments can access certain resources in the Azure environment, the IT team should use Azure AD groups to manage access control. They can create groups based on departmental affiliations and then assign these groups to the resources with the appropriate permissions. Option A is incorrect because it does not address the need for role-based access control. Option C is incorrect as it refers to using Azure roles, which are not suitable for managing access based on departmental affiliations. Option D is incorrect because it suggests using a custom attribute, which is not the best practice for managing access control in Azure AD.