Exam AZ-104 topic 6 question 10 discussion

Correct Answer: B Keyword: "user was able to connect the device in the past". The Maximum number of devices setting enables you to select the maximum number of devices that a user can have in Azure AD. If a user reaches this quota, they will not be able to add additional devices until one or more of the existing devices are removed. By default, the maximum number of devices per user is 50. Azure portal -> Azure Active Directory -> Devices Azure portal -> Azure Active Directory -> Users > Select a user > Devices

For those who choose D, please read the question carefully, "You verify that User1 was able to join devices to Azure AD in the past." So the join device setting should be ok, but he already reach the maximum number of devices per user. Answer B is correct.

I believe the answer is D. My reasoning for this is: 1) There is no indication within the question that the user has reached their limit. 2)”The company's security policy states that all personal devices and corporate-owned devices must be registered or joined to Azure AD.” So perhaps, user1’s personal devices in the past had already been registered/joined to Azure AD (during migration) 3) user1’s new device is unlikely to be registered to join Azure AD, therefore the “new” device needs to be added/registered/joined in the Azure AD settings. I think it has less to do with the user’s “permission” to join devices, but whether the actual devices themselves have been registered to join Azure AD. Feel free to critique my answer if you deem necessary.

The correct answer is D. This is because this setting controls whether users can join their devices to Azure AD or not. If this setting is disabled or restricted, User1 will not be able to join the personal device to Azure AD from the home network. B is not correct because modifying the Maximum number of devices per user setting will not help if User1 is already below the limit. This setting only affects the number of devices that a user can join to Azure AD, not the ability to join them.

Yes, option B is the correct answer. By modifying the "Maximum number of devices per user" setting, you can allow User1 to join the personal device to Azure AD. The default value for this setting is 20 devices per user, so if User1 has already reached this limit, they will be unable to join additional devices to Azure AD.

Answer C make the most sense

Cleared Exam today 26 Feb, This question was there in exam.

D. From the Device settings blade, modify the Users may join devices to Azure AD setting. The reason for this is that if the "Users may join devices to Azure AD" setting is set to "No", then even if a user has the necessary permissions to join a device to Azure AD, they will be unable to do so. By modifying this setting to "Yes", you are allowing User1 to join their personal device to Azure AD from their home network. The other options, such as assigning the User administrator role to User1 or modifying the maximum number of devices per user setting, would not necessarily resolve the issue with User1's ability to join their device to Azure AD. A point-to-site VPN from the home network of User1 to Azure may or may not be necessary, depending on the specific network configuration and security requirements.

user1 was able in the past and is no longer, so he maxed out the number of devices he's allowed to join.

Correct Answer: B

If you picked A....you're the reason breaches happen.

I Luv Honey Because it is B User did add devices in past 3 years ago migration took place hence user properly during that time been adding devices and hence run out of quota

I think B and C are valid. I don't have to explain B. But if there is a conditional access policy C will be correct. This is an assumption, but I have seen question were wilder assumptions need to be made.

Correct Answer: B Key: "user was able to connect the device in the past".

Damn! keep forgetting this one. Answer is B!

in exam 7/3/2021

Answer B is correct. Nothing has changed, so max devices user quota has reached.