Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam

Exam AZ-301 topic 1 question 4 discussion

Actual exam question from Microsoft's AZ-301

Question #: 4
Topic #: 1

You have an on-premises Active Directory forest and an Azure Active Directory (Azure AD) tenant. All Azure AD users are assigned a Premium P1 license.
You deploy Azure AD Connect.
Which two features are available in this environment that can reduce operational overhead for your company's help desk? Each correct answer presents a complete solution.
NOTE: Each correct selection is worth one point.

A. Azure AD Privileged Identity Management policies
B. access reviews
C. self-service password reset
D. Microsoft Cloud App Security Conditional Access App Control
E. password writeback

Show Suggested Answer

Suggested Answer: CE 🗳️

by Shankar at Sept. 3, 2019, 10:35 a.m.

Comments

Submit Cancel

Jake__

Highly Voted 5 years, 8 months ago

C and E is correct The question asks how to reduce operational overhead (aka Helpdesk load) Self service password reset + Password Writeback = Less Helpdesk calls for PW resets thus reducing operational overhead.

upvoted 43 times

Daren

5 years, 3 months ago

Right. That s correct

upvoted 1 times

...

Ekramy_Elnaggar

Highly Voted 5 years, 5 months ago

the key point is "Help Desk" , so we are talking about passwords management which floods the help desk queue usually, So C and E can reduce the help desk efforts for sure.

upvoted 18 times

...

glam

Most Recent 4 years, 5 months ago

C. self-service password reset E. password writeback

upvoted 2 times

...

Jinder

4 years, 5 months ago

The main point is "can reduce operational overhead for your company's help desk". So it should be C and D. E is not related to the "help-desk", that's related to admin. I endorse and agree with "akamal" posted above in the discussion, provided also links from Microsoft documentation.

upvoted 1 times

...

sanketshah

4 years, 6 months ago

CE is correct answer

upvoted 1 times

...

levianthan

4 years, 9 months ago

I wonder how each answer represents a complete solution.. Imagine SSPR without password writeback.

upvoted 1 times

tomtom1

4 years, 9 months ago

SSPR without password writeback will cut the synchronisation connection between on-prem AD and Azure AD. PIM requires P2 license, AR is for managing user access to applications and groups etc. and conditional access app control monitors and controls app access and sessions according to their respective policies.

upvoted 1 times

...

Ivandrago

4 years, 9 months ago

P2 license features --> PIM, access reviews, Conditional Access policies so Answer is C,E

upvoted 3 times

...

gboyega

4 years, 11 months ago

Answer is correct https://azure.microsoft.com/en-us/pricing/details/active-directory/

upvoted 6 times

...

Prash85

4 years, 12 months ago

NOTE: Features that can reduce operational overhead for your company's help desk teams ? So it is C & E NOT D

upvoted 1 times

...

akamal

5 years ago

It's C , D https://azure.microsoft.com/en-us/pricing/details/active-directory/ https://docs.microsoft.com/en-us/cloud-app-security/proxy-intro-aad From Second link: Note To use Cloud App Security Conditional Access App Control, you need an Azure Active Directory P1 license, or the license required by your IdP solution, as well as a Cloud App Security license.

upvoted 2 times

...

fanq10

5 years, 1 month ago

C,E are correct. P1 license does not have PIM.

upvoted 1 times

...

mbelferagui

5 years, 1 month ago

Correct : https://azure.microsoft.com/en-us/pricing/details/active-directory/

upvoted 1 times

...

Karen_12321

5 years, 1 month ago

How about D, it has ability to grant conditional access based on location, device state and group

upvoted 2 times

...

AmineHZ

5 years, 1 month ago

C & E is the correct answer.

upvoted 3 times

...

pandeya442

5 years, 1 month ago

C & E are correct

upvoted 3 times

...

Rajuuu

5 years, 2 months ago

Answers C and E are correct as it helps to reduce the Helpdesk overhead in managing the Password reset and Writeback to the on-premise AD. ..No linked to PIM or P2 license.

upvoted 3 times

...

Vaneck

5 years, 3 months ago

C & E https://docs.microsoft.com/en-ca/azure/active-directory/authentication/concept-sspr-licensing

upvoted 11 times

...

Load full discussion...