Create users and groups

Practice Test

True or false: The Azure Active Directory (AD) handles the management of users and groups.

• True
• False

Answer: True

Explanation: Azure Active Directory (AD) is a Microsoft multi-tenant, cloud-based directory, and identity management service that combines core directory services, application access management, and identity protection.

In Azure, what’s the maximum number of groups that a user can be a part of at any one time?

• A) 500
• B) 1000
• C) 250
• D) There is no limit.

Answer: D) There is no limit.

Explanation: There’s no limit to the number of groups a user can be a member of in Azure Active Directory.

True or False: Azure Active Directory allows the creation of security groups as well as Office 365 groups.

• True
• False

Answer: True

Explanation: Azure Active Directory indeed allows you to create both security groups and Office 365 groups.

What is the maximum number of users that can be added to a group in Azure?

• A) 30,000
• B) 50,000
• C) 100,000
• D) There is no limit.

Answer: B) 50,000

Explanation: Azure has a default limit of 50,000 members per group.

What is the PowerShell cmdlet for adding a user to a group in Azure?

• A) Add-AzADUserGroupMember
• B) New-AzADUser
• C) Add-MsolUser
• D) New-AzADGroup

Answer: A) Add-AzADUserGroupMember

Explanation: The PowerShell cmdlet “Add-AzADUserGroupMember” is used to add a user to a group in Azure.

True or False: Azure Active Directory provides a command-line interface for managing users and groups.

• True
• False

Answer: True

Explanation: Azure Active Directory provides command-line interfaces including Azure CLI and Azure PowerShell.

Multiple select: Which are the valid ways to create an Azure Active Directory group?

• A) The Azure portal
• B) Office 365 admin center
• C) PowerShell
• D) Email command

Answer: A) The Azure portal, B) Office 365 admin center, C) PowerShell

Explanation: Azure AD groups can be created in the Azure portal, the Office 365 admin center, and using PowerShell. Email commands are not valid for creating Azure AD groups.

True or False: When a user is deleted in Azure, they are permanently removed and cannot be restored.

• True
• False

Answer: False

Explanation: Deleted users are stored in Azure’s Recycle Bin for 30 days and can be restored during this period.

What happens if you try to create a user in Azure with an email that is already in use?

• A) The user will be created but will not have the email associated
• B) The operation will be declined
• C) A new email address will be generated
• D) The existing user will be deleted

Answer: B) The operation will be declined

Explanation: Azure prevents duplicates and would decline the operation.

In Azure, who has the permissions to assign users to groups?

• A) Any user
• B) Cloud service administrators
• C) Group owners
• D) Both B & C

Answer: D) Both B & C

Explanation: Both cloud service administrators and group owners can assign users to groups in Azure.

True or False: In Azure, a user can belong to one group at a time.

• True
• False

Answer: False

Explanation: There’s no limit to the number of groups a user can be a member of in Azure Active Directory.

What is the Azure AD service feature used to automatically add or remove user members to a group based on rules?

• A) Group membership rules
• B) Group assignment rules
• C) Dynamic membership rules
• D) User assignment rules

Answer: C) Dynamic membership rules

Explanation: Dynamic membership rules in Azure Active Directory are used to automatically add or remove user members to a group based on user attributes.

True or False: An Azure AD premium subscription is required to create and manage dynamic groups.

• True
• False

Answer: True

Explanation: Dynamic group membership requires a paid or trial subscription of Azure AD Premium or an Office 365 E3 or higher.

Multiple select: Which of these objects can be a member of an Azure Active Directory group?

• A) User
• B) Group
• C) Manager
• D) Device

Answer: A) User, B) Group, D) Device

Explanation: Azure AD groups can include users, other groups, and devices as members. Managers cannot directly be members.

True or False: You can create nested groups in Azure AD.

• True
• False

Answer: True

Explanation: Azure AD supports group nesting, meaning you can add a group to another group.

Interview Questions

1. How can you create a user in Azure Active Directory using the Azure portal?

To create a user in Azure Active Directory using the Azure portal, navigate to Azure Active Directory, then select “Users” and click “New user”.

2. What is required when creating a new user in Azure Active Directory?

When creating a new user in Azure Active Directory, you need to provide a User name, Name, and assign a Role such as User, Administrator, or Custom role.

3. How can you create a group in Azure Active Directory using PowerShell?

To create a group in Azure Active Directory using PowerShell, you can use the

New-AzureADGroup

cmdlet.

4. What does the New-AzureADGroup cmdlet require as input parameters?

The

New-AzureADGroup

cmdlet requires input parameters such as DisplayName, MailEnabled, SecurityEnabled, and MailNickName.

5. How can you add a user to a group in Azure Active Directory using the Azure portal?

To add a user to a group in Azure Active Directory using the Azure portal, go to the group, select "Members", and then click "Add members".

6. Can you add a user to multiple groups in Azure Active Directory?

Yes, you can add a user to multiple groups in Azure Active Directory.

7. How can you remove a user from a group in Azure Active Directory using PowerShell?

To remove a user from a group in Azure Active Directory using PowerShell, you can use the

Remove-AzureADGroupMember

cmdlet.

8. What is the command syntax for removing a user from a group using Remove-AzureADGroupMember?

The command syntax for removing a user from a group using

Remove-AzureADGroupMember

is

Remove-AzureADGroupMember -ObjectId  -MemberId 

.

9. How can you modify group membership for a user in Azure Active Directory using the Azure portal?

To modify group membership for a user in Azure Active Directory using the Azure portal, go to the user, select "Groups", and then click "Add to group".

10. Can you create a group with specified members in Azure Active Directory using Azure CLI?

Yes, you can create a group with specified members in Azure Active Directory using Azure CLI by using the

az ad group create

command.