Implement and Manage User Identities

You need to delegate the ability to reset passwords for users in the 'Sales' department to a local helpdesk lead. You want to ensure the helpdesk lead cannot manage users in any other department. What should you create?

You have a large Microsoft Entra ID tenant with 10,000 users. You need to delegate the ability to reset passwords for users in the 'Seattle' office to a local IT lead, without granting them administrative rights over users in other offices. What should you create?

Your company, Fabrikam, Inc., has acquired another firm. You need to invite 500 external contractors to your Microsoft Entra ID tenant to access specific applications. You want to ensure that these users are categorized as guests and cannot browse the full directory. Which feature should you configure first to enforce these restrictions tenant-wide?

You are managing a hybrid environment with Microsoft Entra Connect. You need to ensure that when a user's account is disabled in the on-premises Active Directory, the corresponding cloud account is also disabled immediately. What is the default behavior of Entra Connect regarding account status?

An organization uses Microsoft Entra ID and needs to create external user accounts for contractors. The contractors should be invited by a select group of non-administrator employees without granting them full User Administrator privileges. Which administrative role should you assign to these employees?

You are creating a dynamic user group in Microsoft Entra ID to automatically include all users from the Marketing department who are located in either London or Paris. Which syntax should you use for the membership rule?

You are configuring External Collaboration settings in Microsoft Entra ID. You want to ensure that only specific partner domains can be invited as guests, and that guest users have the most restricted access to the directory. Which THREE settings should you configure?

Refer to the exhibit. You are reviewing a custom role definition intended for a security auditor. What is the specific effect of the permission defined in the 'operations' array?

Your company uses Microsoft Entra Connect to sync identities from an on-premises Active Directory. You have a user named 'User1' who exists in both environments, but they are not currently linked. You need to perform a 'soft-match' to link them. Which attribute must be identical on both the on-premises and cloud objects?

You need to perform a bulk invite of 50 guest users from a partner company using a CSV file in the Microsoft Entra admin center. Which column is mandatory in the CSV file for the bulk invitation process to succeed?

You accidentally delete a cloud-only user account from the Microsoft Entra admin center. You need to restore the user and their associated group memberships. Within how many days must you perform the restoration before the user is permanently deleted?

You are managing guest users in Microsoft Entra ID. Which TWO statements accurately describe the properties and behaviors of guest user accounts compared to member user accounts?

You want to allow external users to sign in to your Microsoft Entra tenant using their Google accounts. Which TWO steps are required to configure Google federation?

You are assigning a Microsoft 365 Business Premium license to a new user. The assignment fails with an error stating that the usage location is not set. Why is the 'Usage Location' attribute mandatory for license assignment?

A company wants to implement advanced identity management features for their users. You are evaluating the differences between Microsoft Entra ID P1 and P2 licenses. Which TWO features are ONLY available with the Microsoft Entra ID P2 license?

You need to store specialized metadata for users in Microsoft Entra ID that is not available in the standard user profile attributes. This metadata must be accessible via the Microsoft Graph API and must support fine-grained access control so only specific administrators can read or write the data. Which THREE steps are required to implement Custom Security Attributes?

You need to configure B2B collaboration settings in Microsoft Entra ID to restrict external access. The solution must meet the following requirements: 1. Allow users to invite guests only from the domain 'fabrikam.com'. 2. Prevent guests from searching the directory for other users. Which TWO settings should you configure?