ECSA102 BLOB BCA 2026 PRACTICE
SOLUTION REVIEW SET
◉ Azure AD - Security Groups. Answer: manage members, give
access to resources to groups, permissions to members of that group
◉ Azure AD - Security Groups - Direct Assignment. Answer: Users
are added directly to the group
◉ Azure AD - Security Groups - Group Assignment. Answer: Adding
a group to a group
◉ Azure AD - Security Groups - Rule Based Assignment. Answer:
Group assignment based on validation
User attributes or device properties must meet certain rules to be
assigned to that specific group
◉ Azure AD - Power Shell - Command to create a new group.
Answer: new-azureadgroup -displayname Appname -MailNickname
Appname
◉ Azure AD- Power Shell - Command to add a Group Member.
Answer: Add-AZADGroupMember -MemberUserPrincipalName
"" -TargetGroupDisplayName GroupName
,◉ MFA Something you know. Answer: passwords
pin numbers
◉ MFA Something you are. Answer: biometrics
fingerprints
retinal scan
facial recognition
◉ MFA something you have. Answer: authenticator app on cell
phone
Microsoft authenticator
google authenticator
◉ Authentication methods 4. Answer: call to phone
text to phone
Notification through authenticator app
verification code through authenticator app
◉ How to have a user have to re-register for MFA because they lost
their phone?. Answer: Portal > Users > select user > Authentication
methods > require re-register MFA button
,◉ Azure AD 3 kinds of user accounts. Answer: Cloud Identity accs -
native to the cloud, they were not sync from on prem
Directory Sync identities accs - synced from On prem to Azure AD
Guest accounts
◉ 3 main self service capabilities of Azure AD. Answer: Self Service
group management
Self Service application access
Self Service password reset
◉ How to get to the Self Service group management page in Azure
AD?. Answer: Portal > Azure AD > Groups > General
◉ How to block words for group names Azure AD?. Answer: Portal >
Azure AD > Groups > Naming Policy
◉ How to get to Self Service application access in Azure AD?.
Answer: Portal > Azure AD > Enterprise Applications > User settings
-this controls what applications users can access
◉ How to get to password reset in Azure AD. Answer: Portal > Azure
AD > Password Reset
, ◉ Azure AD Domain Join. Answer: Join your devices to your Azure
AD
Register or Join a device
Single Sign On
Enterprise Complaint Roaming
Access to windows store for business
Windows Hello Support
Restriction of Access
Seamless access to on prem resource
◉ AD Connect. Answer: Synchronize identities from on prem to
Azure AD
First install member server on prem enviroment
-then install AD connect on it
30 minutes by default
◉ Azure AD Connect Health. Answer: Has the Sync happened and
are there any Sync errors
-checking on the sync of on prem objects to azure AD
◉ How to get to Azure AD Connect Health?. Answer: Portal > Azure
AD > Azure AD Connect > Azure AD Connect Health
SOLUTION REVIEW SET
◉ Azure AD - Security Groups. Answer: manage members, give
access to resources to groups, permissions to members of that group
◉ Azure AD - Security Groups - Direct Assignment. Answer: Users
are added directly to the group
◉ Azure AD - Security Groups - Group Assignment. Answer: Adding
a group to a group
◉ Azure AD - Security Groups - Rule Based Assignment. Answer:
Group assignment based on validation
User attributes or device properties must meet certain rules to be
assigned to that specific group
◉ Azure AD - Power Shell - Command to create a new group.
Answer: new-azureadgroup -displayname Appname -MailNickname
Appname
◉ Azure AD- Power Shell - Command to add a Group Member.
Answer: Add-AZADGroupMember -MemberUserPrincipalName
"" -TargetGroupDisplayName GroupName
,◉ MFA Something you know. Answer: passwords
pin numbers
◉ MFA Something you are. Answer: biometrics
fingerprints
retinal scan
facial recognition
◉ MFA something you have. Answer: authenticator app on cell
phone
Microsoft authenticator
google authenticator
◉ Authentication methods 4. Answer: call to phone
text to phone
Notification through authenticator app
verification code through authenticator app
◉ How to have a user have to re-register for MFA because they lost
their phone?. Answer: Portal > Users > select user > Authentication
methods > require re-register MFA button
,◉ Azure AD 3 kinds of user accounts. Answer: Cloud Identity accs -
native to the cloud, they were not sync from on prem
Directory Sync identities accs - synced from On prem to Azure AD
Guest accounts
◉ 3 main self service capabilities of Azure AD. Answer: Self Service
group management
Self Service application access
Self Service password reset
◉ How to get to the Self Service group management page in Azure
AD?. Answer: Portal > Azure AD > Groups > General
◉ How to block words for group names Azure AD?. Answer: Portal >
Azure AD > Groups > Naming Policy
◉ How to get to Self Service application access in Azure AD?.
Answer: Portal > Azure AD > Enterprise Applications > User settings
-this controls what applications users can access
◉ How to get to password reset in Azure AD. Answer: Portal > Azure
AD > Password Reset
, ◉ Azure AD Domain Join. Answer: Join your devices to your Azure
AD
Register or Join a device
Single Sign On
Enterprise Complaint Roaming
Access to windows store for business
Windows Hello Support
Restriction of Access
Seamless access to on prem resource
◉ AD Connect. Answer: Synchronize identities from on prem to
Azure AD
First install member server on prem enviroment
-then install AD connect on it
30 minutes by default
◉ Azure AD Connect Health. Answer: Has the Sync happened and
are there any Sync errors
-checking on the sync of on prem objects to azure AD
◉ How to get to Azure AD Connect Health?. Answer: Portal > Azure
AD > Azure AD Connect > Azure AD Connect Health
