ACP-520 Atlassian Cloud Organization Admin Certification Questions and Answers

The only statement that is definitely true is that Drew’s email address is verified. This is because product access requests must be made by a user with a verified email address and Atlassian account1 The other statements are not necessarily true, as they depend on other factors, such as the roles and permissions of Beth and Drew, the existing users on the site, and the self-signup settings2

References = Approve or deny product access requests, Manage product access

The table is showing the total number of managed accounts in the organization and the number of deactivated accounts. The total number of managed accounts is the number ofbillable users in the organization, regardless of whether they have verified their email addresses or not. The deactivated accounts are the accounts that have been suspended by the organization admin and do not consume a license. Therefore, you can definitely conclude that you have 8 billable users in your organization12

References = View and manage your bill, Remove or suspend a user

An Atlassian Cloud organization can have one or more sites, each containing one instance of each product1. A site has its own URL and administration settings2. Since your organization has two instances of Jira Software and two instances of Confluence, it must have at least two sites to host them. For example, one site could have the URL acme.atlassian.net and contain Jira Software and Confluence, while another site could have the URL acme-dev.atlassian.net and contain another instance of Jira Software and Confluence.

The other options are not necessarily true for your organization. Having multiple sites does not imply that you have verified your domain, which is a process that allows you to manage the Atlassian accounts of your users and apply security policies to them3. You may or may not have verified your domain, depending on whether you have access to your domain’s DNS or HTTPS settings. Verifying your domain is not required to use Atlassian cloud products.

A landing product is the product that your users see first when they log in to your site4. You can only set the landing product to Jira or Confluence. Therefore, you cannot have exactly four landing products, as you can only have one landing product per site. You may have two landing products if you set one for each site, or you may have none if you do not set any.

A Premium subscription plan is a plan that offers advanced features, unlimited storage, 99.9% uptime SLA, and 24/7 Premium support for Jira Software, Confluence, Jira Service Management, and Jira Work Management5. You may or may not have a Premium subscription plan for your products, depending on your needs and budget. Having multiple sites or products does not automatically mean that you have a Premium subscription plan.

A sandbox is an isolated environment where you can test and experiment before making changes to production6. A sandbox is available for Jira Software, Jira Service Management, and Confluence with Premium and Enterprise plans6. You may or may not have sandboxes for your products, depending on whether you have a Premium or Enterpriseplan and whether you have created a sandbox from your organization. Having multiple sites or products does not automatically mean that you have sandboxes.

References :

• Understand Atlassian sites and organizations
• What is an Atlassian organization?
• Verify a domain to manage accounts
• Set your site’s landing product
• Atlassian Cloud Premium
• Manage product sandboxes

Currently, you can only create one sandbox for each linked product1. Since you have only two products (Jira Software and Confluence), and you already have a sandbox for Confluence, you cannot create any more sandboxes for your organization.

References: Manage product sandboxes

Anonymous access is a method to grant Confluence product access to new users without requiring admin approval or an Atlassian account. Users can view public spaces and pages in Confluence without logging in. However, anonymous access does not allow users to edit, comment, or create content in Confluence.

One other access request you might see for Ann on the Access Requests page is access to another product. This could happen if Ann tries to access a product that she does not have access to, such as Confluence or Jira Service Management. She would see a message prompting her to request access, and you would see her request on the Access Requests page. You can approve or deny her request from there1

References = Approve or deny product access requests

Permission schemes control who can see and do what in Jira projects. If the org admin changed the permission scheme for the project that Jack was working on, it could affect his visibility and access to the issues.

References:

• How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section “Users and Groups”
• Manage project permissions

A direct cause for the “engineers” group having a lot more members than you have added manually is that it is a default group for Jira Software product access. This means that any new user who joins your site and has access to Jira Software will automatically be added to the “engineers” group. You can check and change the default group for Jira Software by going to Products > Jira Software > Manage product > Product roles.

References = [Default groups and permissions] and [Manage role and product permissions]

If you want to ensure that the script can no longer access the information about the domains in your Cloud organization, you need to revoke the API key that was used to authenticate the script. An API key is a token that allows you to manage your organization via the admin APIs1. You can create, view, and revoke API keys from the organization settings2. Revoking an API key will invalidate it and prevent any further requests using that key2.

The other options are not relevant or effective for stopping the script from accessing the information. Removing DNS records or removing a verified domain will not affect the API key that was used by the script. It will only affect the verification status of your domain and the management of your users and accounts3. Regenerating a security key will not affect the API key that was used by the script. It will only affect the encryption of your data at rest4. Deleting an IP allowlist will not affect the API key that was used by the script. It will only affect the IP addresses that are allowed to access your organization and products5.

References :

• Manage an organization with the admin APIs
• Create and revoke API keys
• Verify a domain to manage accounts
• Regenerate your security key
• Set up an IP allowlist

Each site in an organization must have a unique name and URL. You cannot have two sites with the same name or URL in the same organization.

ReferencesAdd a new product to your organization Update a product URL to a new URL

The correct product access configuration for Bob is Jira Administration with Product admin role and Jira Software with User role. This will allow Bob to update project schemes in Jira Software, as well as other project settings, without using a license. The Product admin role for Jira Administration grants access to the Jira Administration product, which is aseparate product from Jira Software that does not consume a license. The User role for Jira Software grants access to the Jira Software product, which does consume a license, but is necessary for Bob to view and edit project schemes12

References = Manage product access, Jira Administration overview

The only outcome that is not possible for Edmund is that he is granted org admin privileges. This is because org admin privileges are not related to product access or product roles, but to organization settings and management. To grant Edmund org admin privileges, you would need to go to Settings > Organization admins and add him there. The other outcomes are possible depending on the product access settings and the groups that Edmund belongs to.

References = [Give users access to products] and [Manage organization admins]

By unselecting the User product role for Confluence, you are removing the site-admins group from the default groups that manage roles for that product1. This means that ACME site admins will lose their Confluence admin permissions, such as managing Confluence settings, space permissions, etc2. They will still be able to see Confluence users, but not edit their roles or access.

References: Default groups and permissions, Confluence Admin Permission Levels Explained

After the products from Original were transferred to Destination, Jira Software will appear as a single product under the Destination URL. This is because the Original organization was deleted, so there is no longer a separate URL for it.

References:

• How to prepare for ACP-520: Atlassian Cloud Organization Admin Certification, section “Manage multiple sites and products”
• Transfer products to another organization, subsection “What happens after you transfer products?”

Atlassian Access is a subscription that connects your Atlassian cloud products to your identity provider. It allows you to enable enterprise-grade authentication features, and additional oversight, across your company domains1.

References: Understand Atlassian Access, Atlassian Access: Enhanced Cloud Data Security & Governance

When you go to the Jira Software product pricing page, you can sign up for a new Atlassian site by clicking the Try it free button. You will be asked to enter your email address and choose a site name and URL. However, you must use an email address from a non-public domain, such as your company or organization domain. You cannot use an email address from a public domain, such as Gmail or Yahoo, because they are not allowed for security reasons12

References = Sign up for an Atlassian Cloud site, Atlassian Cloud site and organization domains