What should you do?

You have an Azure Active Directory (Azure AD) tenant linked to an Azure subscription. The tenant contains a group named Admins.
You need to prevent users, except for the members of Admins, from using the Azure portal and Azure PowerShell to access the subscription.
What should you do?
A. From Azure AD, configure the User settings.
B. From Azure AD, create a conditional access policy.
C. From the Azure subscription, assign an Azure policy.
D. From the Azure subscription, configure Access control (IAM).

Correct Answer: B
Explanation/Reference:
Explanation:
Azure AD Connect allows you to quickly onboard to Azure AD and Office 365.
Note: The most common topology is a single on-premises forest, with one or multiple domains, and a single Azure AD tenant. For Azure AD authentication, password hash synchronization is used. The express installation of Azure AD Connect supports only this topology.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologiesTypically, you use Conditional Access to control access to your cloud apps. You can also set up policies to control access to Azure management.
The policy you create applies to all Azure management endpoints, including the following:
Azure portal
Azure Resource Manager provider
Classic Service Management APIs
Azure PowerShell
Visual Studio subscriptions administrator portal
Azure DevOps
Azure Data Factory portal
To create a policy for Azure management, you select Microsoft Azure Management under Cloud apps when choosing the app to which to apply the policy.

Incorrect Answers:
A: From User Settings you can only restrict access to Azure Portal, not access to Azure Powershell.
Note: Microsoft allows restricting standard user access to Azure Active Directory administration portal.
1. Log in to Azure portal as Global Administrator
2. Go to Azure Active Directory | User Settings
3. Then click on Yes under Restrict access to Azure AD administration portal

Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/conditional-access-azure-management
https://www.rebeladmin.com/2019/04/step-step-guide-restrict-azure-ad-administration-portal/

How To Pass Azure AZ-305 Exam? Microsoft Azure AZ-305 PDF dumps. High quality AZ-305 PDF and software. VALID exam to help you pass.