CloudGuild · Blog · Cheat sheets · Lessons · Certifications

Understanding Azure Active Directory's Purpose

Explore the primary purpose of Azure Active Directory (Azure AD) and why it often confuses candidates in the AZ-104 exam.

What is the primary purpose of Azure Active Directory (Azure AD)? This question often trips candidates up. Many confuse Azure AD with other Azure services. Understanding its core function is critical for the AZ-104 exam.

The question

What is the primary purpose of Azure Active Directory (Azure AD)?
A. To manage virtual machines in Azure.
B. To provide identity and access management services.
C. To store data in Azure Blob Storage.
D. To monitor network traffic in Azure.

Think before you scroll

Before choosing an answer, consider what Azure AD actually does. Focus on its role in identity and access management. The other options relate to different Azure services, not identity management.

The answer

The correct option is B. To provide identity and access management services. Azure AD is specifically designed for this purpose. It allows organizations to manage users and their access to various resources effectively.

Why the other options lose

A. To manage virtual machines in Azure. This option refers to Azure's Virtual Machine service, which manages compute resources. Azure AD does not deal with virtual machine management.

C. To store data in Azure Blob Storage. Azure Blob Storage is a service for storing large amounts of unstructured data. Azure AD does not handle data storage; it focuses on identity and access management.

D. To monitor network traffic in Azure. This option relates to Azure Monitor or Network Watcher services, which analyze and report on network traffic. Azure AD does not monitor traffic; it manages identities and access.

The concept behind it

Azure Active Directory is crucial for controlling access to Azure resources. It serves as the backbone for identity management, enabling organizations to authenticate users and authorize access to applications and services. Remember, it is distinct from other Azure services that focus on compute or storage.

Exam trap to remember

Always associate Azure AD with identity and access management. If the question involves user management, think Azure AD. For compute or storage, consider other Azure services.

Take a free mock exam →