Discover the truth about using Azure AD credentials to sign into Windows 10 computers, organizing users with resource groups, and dynamic group membership rules. Get the facts you need to ace the Microsoft AZ-900 certification exam.
Table of Contents
Question
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
- To use Azure Active Directory (Azure AD) credentials to sign in to a computer that runs Windows 10, the computer must be joined to Azure AD.
- Users in Azure Active Directory (Azure AD) are organized by using resource groups.
- Azure Active Directory (Azure AD) groups support dynamic membership rules.
Answer
- To use Azure Active Directory (Azure AD) credentials to sign in to a computer that runs Windows 10, the computer must be joined to Azure AD: Yes
- Users in Azure Active Directory (Azure AD) are organized by using resource groups: No
- Azure Active Directory (Azure AD) groups support dynamic membership rules: Yes
Explanation
To use Azure Active Directory (Azure AD) credentials to sign in to a computer that runs Windows 10, the computer must be joined to Azure AD.
Answer: Yes. This statement is true. In order to use Azure AD credentials to sign into a Windows 10 computer, that computer must first be joined to the Azure AD domain, similar to how on-premises Windows computers are joined to an Active Directory domain. Joining the computer to Azure AD enables single sign-on and allows the Azure AD credentials to be used for Windows sign-in.
Users in Azure Active Directory (Azure AD) are organized by using resource groups.
Answer: No. This statement is false. Users in Azure AD are not organized using resource groups. Resource groups are used to logically group and manage Azure resources like virtual machines, storage accounts, web apps, databases, and virtual networks. Azure AD users and groups are managed separately within the Azure AD service itself.
Azure Active Directory (Azure AD) groups support dynamic membership rules.
Answer: Yes. This statement is true. Azure AD supports creating groups with dynamic membership rules. This allows group membership to be automatically updated based on user or device attributes like department, location, title, etc. For example, a group could be created with a dynamic rule specifying that all users with the title “Manager” should be automatically added. This eliminates the overhead of needing to manually add/remove group members.
In summary, Azure AD credentials can be used to sign into Windows 10 only if the computer is joined to Azure AD, users are managed within the Azure AD service rather than resource groups, and Azure AD supports dynamic group membership based on user/device attributes.
Microsoft AZ-900 certification exam practice question and answer (Q&A) dump with detail explanation and reference available free, helpful to pass the Microsoft AZ-900 exam and earn Microsoft AZ-900 certification.