Atlassian Cloud Organization Admin Certification ACP-520 Exam Practice Test

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : E

As an organization admin, you can delete both managed and unmanaged accounts. Managed accounts are those that belong to your organization and are verified by a domain or an allowlist. Unmanaged accounts are those that do not belong to your organization and are not verified by a domain or an allowlist. Deleting an account removes the user's access to all Atlassian products and services, and deletes their personal data.

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

Reference Add a new product to your organizationUpdate a product URL to a new URL

Answer : F

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

Reference= [Give users access to products] and [Manage organization admins]

Answer : A

Shadow IT refers to the product creation and usage administered outside of an organization's IT department, which can lead to unexpected costs, security and compliance concerns, and operational complexity1.Atlassian Access is a service that provides enhanced security and governance features for Atlassian Cloud products, such as SAML SSO, user provisioning, enforced two-step verification, and audit logs2.Atlassian Access also offers a feature called automatic product discovery, which helps admins discover and manage the shadow IT products created by their managed users1.

A managed user is a user whose account is on a domain that is verified by an organization3.A verified domain is a domain that an organization has proven ownership of by adding a DNS or HTTPS record4. For example, if an organization verifies the domain acme.com, then any user with an email address ending with @acme.com is a managed user of that organization.

A product is an instance of an Atlassian Cloud product, such as Jira Software, Confluence, Bitbucket, or Trello5.A product belongs to a site, which is a collection of products that share a URL and administration settings6.A site belongs to an organization, which is a way to group and manage multiple sites and products under one central admin console7.

A managed user can create a product in another Cloud organization by using their work email address to sign up for a new site or join an existing site that is not owned by their organization1. This creates a shadow IT product that is not visible or controlled by their organization's admins.Atlassian Access can discover these shadow IT products by scanning the domains of all Atlassian Cloud products and matching them with the domains of the organizations that have Atlassian Access enabled1. Atlassian will proactively send an email to the organization admins with the number of shadow IT products created by their managed users and what the exact shadow IT product is.Within admin.atlassian.com, organization admins can also view additional information, such as the owner of these products, how many users are in that product, and the date it was created1.

Therefore, the statement that explains how Atlassian Access discovered shadow IT is that one of your managed accounts created a product in another Cloud organization.

Automatic product discovery in Atlassian Access

Atlassian Access: Enhanced Cloud Data Security & Governance

What is a managed account?

Verify a domain to manage accounts

What is a product?

Understand Atlassian sites and organizations

What is an Atlassian organization?

Answer : D

Martha needs to be able to use and update global templates and blueprints. The correct product access configuration for Martha is Confluence Administration with Product admin role. This role allows her to manage global templates and blueprints, as well as other site-wide settings for Confluence. She also needs the User role for Confluence to access and edit pages.

Reference=Manage product access,Administer global templates

Answer : D

Organization insights is a feature that provides analytics and reports on your organization's users, products, and security. You can access it from the Insights tab in your organization settings.Organization insights is available for all Atlassian cloud products and plans1.

View organization insights

Answer : E

This is because the access request shown in the image is for Confluence and the reason stated is ''Needs to access Confluence''. Hence, Monica is granted the User role for Confluence, which allows her to view and edit pages and spaces in Confluence. She is not granted access to any other products or any Product Admin roles, which require higher permissions. She is also added to only one default group, which is the confluence-users group, unless the site admin has changed the default group for Confluence.

Reference= [Approve or deny product access requests], [Manage product access]

Answer : C

If a group that was used to share a filter or a dashboard was deleted, the users who belonged to that group would no longer receive the filter subscriptions or see the dashboard .

[Manage shared filters and dashboards]

[Manage users, groups, permissions, and roles in Jira Cloud]

Answer : B

Deleting the group ''jira-software-users-acme'' means that all the users in that group lose their product access to Jira Software1.This means that they can no longer perform any actions that require the Jira Software User role, such as updating an agile board2. The other options are not directly affected by deleting the group, as they depend on other factors such as personal settings, Confluence permissions, service project roles, and API tokens.

Manage product access

Manage product roles

Answer : E

The Billing page shows you the number of billable users for each product on your site, as well as the user tier and the monthly cost. You can filter by product and site to see the specific details for Jira Software on ''acme.atlassian.net''.

How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section ''Manage product subscriptions & billing''

Manage your bill for Standard and Premium plans, subsection ''View your bill''

Answer : A

Adding an upstream port is one of the configuration steps that must be done in a self-managed instance to enable a secure pathway between a self-managed Jira Software instance and several Atlassian Cloud products. An upstream port is the port on your self-managed instance that receives traffic from the application tunnel. You need to configure the upstream port for each product that you want to connect to the tunnel.

Reference=Configure required connections and upstream portsandCreate an application tunnel to your self-managed instance

Answer : C

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script.An API key is a token that allows you to manage your organization via the admin APIs1.You can create, view, and revoke API keys from the organization settings2.Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script.It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script.It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script.It will only affect the IP addresses that are allowed to access your organization and products5.

Manage an organization with the admin APIs

Create and revoke API keys

Verify a domain to manage accounts

Regenerate your security key

Set up an IP allowlist

Answer : E

When Ravi invites a teammate to join a product, an access request is generated for that product only. If the teammate needs access to another product on the same site, they can request it themselves or Ravi can invite them again. Therefore, if Ravi wants his teammate to have access to both Confluence and Jira Software, he needs to send two invitations, resulting in two access requests.

Reference Invite users to your siteApprove or deny product access requests

Answer : A

By removing the default group from the Jira Software User product role, you can prevent new users from automatically getting access to Jira Software when they join your site. This way, you can control who gets access to Jira Software and how many licenses are consumed.

Reference Manage product accessProduct roles and permissions

Answer : A

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.