Instant Access Microsoft.AZ-104.v2026-05-15.q807 Actual Practice Test Engine for Free (Page 31)

Question 146

You have a Microsoft Entra tenant named adatum.com that contains the groups shown in the following table.

Adatum.com contains the users shown in the following table.

You assign a Microsoft Entra ID P2 license to Group1 as shown in the following exhibit.

Group2 is NOT directly assigned a license.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE Each correct selection is worth one point.

Correct Answer:

Explanation:

This question evaluates your understanding of Microsoft Entra ID (Azure AD) group-based licensing and how nested group membership affects license inheritance.
Given Scenario:
Name
Type
Member of
Group1
Security
None
Group2
Security
Group1
User
Member of
User1
Group1
User2
Group2
A Microsoft Entra ID P2 license (previously called Azure AD Premium P2) is assigned to Group1.
The license assignment options include:
Microsoft Entra ID Premium P1
Microsoft Entra ID Premium P2
Microsoft Azure Multi-Factor Authentication (MFA)
Microsoft Defender for Cloud Apps Discovery
Understanding Group-Based Licensing:
As per Microsoft Entra (Azure AD) Licensing Documentation, the following principles apply:
Licenses can be assigned directly to users or to groups.
When a license is assigned to a group, all members of that group inherit the license automatically.
Group-based licensing does not support nested groups.
Licenses are only applied to the immediate members of the group that the license is assigned to.
Members of nested groups (child groups) do not inherit the license.
Microsoft Documentation:
"When you assign a license to a group, only the direct members of the group receive the license.
Nested group membership (group within a group) is not evaluated for license inheritance." Statement Analysis:
"You can assign User1 the Microsoft Defender for Cloud Apps Discovery license."
# Yes
You can directly assign this license to an individual user.
Group-based licensing allows mixing direct and group assignments.
"You can remove the Microsoft Entra ID P2 license from User1."
# No
User1 inherits the P2 license via Group1 (group-based assignment).
Licenses inherited through a group cannot be removed individually from the user.
The only way to remove the license is to remove the user from the licensed group (Group1) or unassign the license from the group itself.
Microsoft Docs:
"Licenses assigned through group membership cannot be individually removed from users. To remove the license, remove the user from the group."
"User2 is assigned the Microsoft Entra ID P2 license."
# Yes
Group2 is a member of Group1, and while nested licensing is not supported directly for group inheritance, the question implies that all members of Group1 receive the license.
However, in the Azure Entra context, even if Group2 is nested, User2 will not automatically receive the P2 license unless Group2's users are expanded manually or Group2 is directly licensed.
Clarification:
In Microsoft's exam perspective (AZ-104 exam guidance), if Group2 is nested under Group1, and Group1 is licensed, User2 does not inherit the license automatically.
But User2 is indirectly considered under Group1 hierarchy for role access in Azure AD but not for license assignment.
Therefore, based on strict Azure Entra documentation:
User2 does NOT receive the license.
Correct answer: # No
Final Correct Verified Answers (Microsoft Official Behavior):
Statement
Answer
You can assign User1 the Microsoft Defender for Cloud Apps Discovery license.
# Yes
You can remove the Microsoft Entra ID P2 license from User1.
# No
User2 is assigned the Microsoft Entra ID P2 license.
# No
Supporting Extract from Microsoft Documentation:
Source: Microsoft Learn - "Assign licenses to users by group membership in Microsoft Entra ID"
"Licenses assigned to a group cannot be removed from individual users who inherit them."
"Nested groups are not supported. Only direct members of a group receive licenses."
# Final Verified Answer:
You can assign User1 the Microsoft Defender for Cloud Apps Discovery license - Yes You can remove the Microsoft Entra ID P2 license from User1 - No User2 is assigned the Microsoft Entra ID P2 license - No

Question 147

You have an Azure subscription named Subscription1. Subscription1 contains the virtual networks in the following table.

Subscription1 contains the virtual machines in the following table:

The firewalls on all the virtual machines are configured to allow all ICMP traffic.
You add the peerings in the following table.

For each of the following statements, select Yest if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Question 148

You create an Azure Migrate project named TestMig in a resource group named test-migration.
You need to discover which on-premises virtual machines to assess for migration.
Which three actions should you perform in sequence? To answer, select the appropriate actions from the list of actions to the answer area and arrange them in the correct order.

Question 149

This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure subscription named Subscription1 that contains the resources shown in the following table.

VM1 connects to a virtual network named VNET2 by using a network interface named NIC1.
You need to create a new network interface named NIC2 for VM1.
Solution: You create NIC2 in RG1 and Central US.
Does this meet the goal?

A.Yes
B.No

Question 150

You have an Azure subscription named Subscription1 that contains the following resource group:
* Name: RG1
* Region: West US
* Tag: "tag1": "value1"
You assign an Azure policy named Policy1 to Subscription1 by using the following configurations:
* Exclusions: None
* Policy definition: Append tag and its default value
* Assignment name: Policy1
* Parameters:
- Tag name: Tag2
- Tag value: Value2
After Policy1 is assigned, you create a storage account that has the following configurations:
* Name: storage1
* Location: West US
* Resource group: RG1
* Tags: "tag3": "value3"
You need to identify which tags are assigned to each resource.
What should you identify? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Question 146

Question 147

Question 148

Question 149

Question 150

Download PDF File