Identity & governance
35 practice questions with explanations — 15 free to try
PassNova has 35 Microsoft Azure Administrator (AZ-104) practice questions on Identity & governance, each with a clear explanation. A 15-question taster is free with no sign-up; the full bank is part of PassNova Premium. Updated for 2026.
Identity & governance: example questions & answers
2 worked examples with answers and explanations below. Try 15 Microsoft Azure Administrator (AZ-104) questions free in the browser; the full 35-question Identity & governance bank is part of PassNova Premium.
Which Microsoft Entra ID role assignment scope grants permissions across all subscriptions linked to a single tenant?
- AResource scope
- BSubscription scope, covering only the resources billed to that one subscription
- CManagement group scope✓
- DResource group scope
Answer: Assigning an Azure RBAC role at a management group scope cascades down to all subscriptions, resource groups, and resources beneath it, making it the broadest practical scope for governance.
You need to grant a user the ability to manage all resources in a resource group but NOT assign roles to others. Which built-in role should you use?
- AOwner
- BReader
- CUser Access Administrator
- DContributor✓
Answer: The Contributor role allows full management of resources but cannot grant access to others; only Owner and User Access Administrator can manage role assignments.