Exam SC-300 topic 1 question 21 discussion

Looks like the max devices applies to registered and joined (just not hybrid), so I'm thinking 1) No 2) Yes 3) No https://docs.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal#:~:text=Maximum%20number%20of%20devices%20setting%20applies%20to%20devices%20that%20are%20either%20Azure%20AD%20joined%20or%20Azure%20AD%20registered

https://docs.microsoft.com/en-gb/azure/active-directory/devices/device-management-azure-portal#configure-device-settings 1. No Maximum number of devices: This setting enables you to select the maximum number of Azure AD joined or Azure AD registered devices that a user can have in Azure AD 2. Yes You must be assigned one of the following roles to view or manage device settings in the Azure portal: Global Administrator Cloud Device Administrator Global Reader Directory Reader 3.No Only Azure AD joined devices

no yes no # i think the first is no because the user has no permissions to

Given the current settings, User1 can join up to 5 devices to Azure AD. Since User1 already has 1 device Azure AD joined, they can join **4 more devices** to Azure AD. The Azure AD registered devices do not count towards the Azure AD joined device limit. So, User1 can indeed join another 4 Windows devices to Azure AD.

No No No The limit is 5, and the user already have 2 so he can't add 4 more. the limit applies to both Joined and Registered. "The Maximum number of devices setting applies to devices that are either Microsoft Entra joined or Microsoft Entra registered. This setting doesn't apply to Microsoft Entra hybrid joined devices." "Cloud Device Administrator: This is a privileged role. Users in this role can enable, disable, and delete devices in Microsoft Entra ID and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device." The Device Admin role, new name Entra Joined Local Administrator, only applied to Entra Joined devices, not Registered devices

1) No 2) Yes 3) No (2) https://learn.microsoft.com/en-us/entra/identity/devices/manage-device-identities#configure-device-settings

NO YES NO

Box 2 is YES. - You must be assigned one of the following roles to manage device settings: Global Administrator Cloud Device Administrator

Yes NO NO Name: Cloud Device Administrator Description: Users in this role can enable, disable, and delete devices in Microsoft Entra ID and read Windows 10 BitLocker keys (if present) in the Azure portal. The role does not grant permissions to manage any other properties on the device. This role is considered privileged because one or more of its permissions are privileged Name: Microsoft Entra Joined Device Local Administrator Description: Users with this role become local machine administrators on all Windows 10 devices that are joined to Microsoft Entra. They do not have the ability to manage devices objects in Microsoft Entra.

1) Yes. Not tested. As I understand the user can join additional 4 devices to the Azure AD because the number of devices per user is set to 5. I slightly checked with AI's answer. 2) Yes. I just tested this one. The cloud device administrator can set this setting to Yes. 3) Yes. The user has a device administrator role added to the local administrator on the device.

Azure device limit restriction Azure device limit restrictions set the maximum number of devices that either Microsoft Entra joins or Microsoft Entra registers. To set the Maximum number of devices per user, go to the Azure portal > Microsoft Entra ID > Devices. For more information, see https://learn.microsoft.com/en-us/mem/intune/enrollment/device-limit-intune-azure 1.) NO

I also support the 1.No, 2.Yes, 3.No community here.

Seems the real correct answer is 1-No, 2-Yes, 3-No, and not what is shown

Correction: NO YES NO

NO NO NO

The correct answers are No, No, No . There was quite a lot to think about in this question but it wasn't that hard to prove so I'm not sure why all the disagreement. 1) No. The set limit is 5. We have 4 and Microsoft state that both AZure AD registered and Azure AD joined devices count (not hybrid-joined). Here is the reference: https://learn.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal 2) No. It's easy to test and I did. 3) No. This was a bit trickier. I nearly said yes before realizing this only applies to Win 10/11 Azure AD JOINED devices. This device is only registered. "Additional local administrators on Azure AD joined devices: This setting allows you to select the users who are granted local administrator rights on a device. These users are added to the Device Administrators role in Azure AD. Global Administrators in Azure AD and device owners are granted local administrator rights by default." https://learn.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal

The Second question answer is 100 % YES. You can find the reason here : "You must be assigned one of the following roles to view or manage device settings in the Azure portal: Global Administrator Cloud Device Administrator Global Reader Directory Reader" https://learn.microsoft.com/en-us/azure/active-directory/devices/device-management-azure-portal The First question is NO - The Maximum number of devices setting applies to devices that are either Azure AD joined or Azure AD registered. This setting doesn't apply to hybrid Azure AD joined devices. - same link !