SC-300 practice questions 361–370

1. Question 361 · 394 in bank

   HOTSPOT - You have an Azure subscription that contains a user named User1. You onboard Microsoft Entra Permissions Management. You need to perform the following tasks: • Identify all the accounts that are assigned the Global Administrator role permanently. • Review the Permission Creep Index (PCI) of User1. Which tab in Permissions Management should you use for each task? To answer, select the appropriate options in the answer area.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Review the Permission Creep Index (PCI) of User1: Analytics Customers only need to track the evolution of their Permission Creep Index (PCI) to monitor permissions usage. Customers can monitor PCI in the Analytics tab from their Permissions Management dashboard. The Permission Creep Index (PCI): Provides the following information: • Index: A numeric value assigned to the PCI. • Since: How many days the PCI value has been at the displayed level. https://learn.microsoft.com/en-us/entra/permissions-management/faqs#how-can-customers-monitor-permissions-usage-with-permissions-management https://learn.microsoft.com/en-us/entra/permissions-management/usage-analytics-users#view-the-results-of-your-query

   Source: Adapted from community discussion — penatuna

   References

   • Microsoft Learn
   • Microsoft Learn
   • Microsoft Learn

   

   Next question

2. Question 362 · 394 in bank

   You have an Azure subscription. You need to use Microsoft Entra Permissions Management to automatically monitor permissions and create and implement right-size roles. The solution must follow the principle of least privilege. Which role should you assign to the service principal of Permissions Management?

   • AUser Access Administrator
   • BContributor
   • CReader
   • DOwner

   Show answer

   Answer: A

   Explanation

   A. User Access Administrator To use Microsoft Entra Permissions Management to automatically monitor permissions and create and implement right-size roles while following the principle of least privilege, you should assign the User Access Administrator role to the service principal of Permissions Management. The User Access Administrator role allows the service principal to manage user access to Azure resources, including the ability to grant and revoke access, but it does not grant excessive permissions such as Contributor or Owner roles. This aligns with the principle of least privilege, ensuring that the service principal has the necessary permissions to perform its tasks without unnecessary access to modify resources.

   Source: Adapted from community discussion — dzdz

   References

   • Microsoft Learn

   Next question

3. Question 363 · 394 in bank

   HOTSPOT - You have an Azure subscription named Sub1. You plan to onboard Microsoft Entra Permissions Management. You need to ensure that Permissions Management users can manage role assignments for Sub1. The solution must follow the principle of least privilege. Which role should you assign and to which identity should you assign the role? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   i personally think MS will favour EPM over Cloud Infrastructure Entitlement Management (CIEM) as an answer even though they are both great solutions.Damn.

   Source: Adapted from community discussion — Alcpt

   References

   • Microsoft Learn

   

   Next question

4. Question 364 · 394 in bank

   You have an Azure subscription, a Google Cloud Platform (GCP) account, and an Amazon Web Services (AWS) account. You need to recommend a solution to assess the risks associated with privilege assignments across all the platforms. The solution must minimize administrative effort. What should you include in the recommendation?

   • AMicrosoft Sentinel
   • BMicrosoft Entra ID Protection
   • CMicrosoft Defender for Cloud Apps
   • DMicrosoft Entra Permissions Management

   Show answer

   Answer: D

   Explanation

   D. Microsoft Entra Permissions Management Microsoft Entra Permissions Management is the appropriate solution to assess the risks associated with privilege assignments across Azure, Google Cloud Platform (GCP), and Amazon Web Services (AWS) accounts. It provides centralized management and monitoring of permissions and access across multiple cloud platforms, helping identify and remediate risks associated with privilege assignments. By using Microsoft Entra Permissions Management, you can minimize administrative effort by having a single tool to manage permissions across different cloud environments.

   Source: Adapted from community discussion — dzdz

   Next question

5. Question 365 · 394 in bank

   You have a Microsoft Entra tenant. You need to configure continuous access evaluation for app sign-ins and assign the configuration to users that are assigned the Application Administrator role. What should you configure?

   • Aa sign-in risk policy
   • Ban access review
   • Ca Conditional Access policy
   • Dthe Admin consent settings

   Show answer

   Answer: C

   Explanation

   C. a Conditional Access policy To configure continuous access evaluation for app sign-ins and assign the configuration to users that are assigned the Application Administrator role, you should configure a Conditional Access policy. Conditional Access policies in Microsoft Entra allow you to control access to apps and resources based on certain conditions such as user, location, device, and application state. By creating a Conditional Access policy, you can enable continuous access evaluation for app sign-ins and target the policy specifically to users assigned the Application Administrator role. This ensures that the configuration applies only to those users who have the appropriate role.

   Source: Adapted from community discussion — dzdz

   References

   • Microsoft Learn

   Next question

6. Question 366 · 394 in bank

   HOTSPOT - You have an Azure subscription named Sub1. You plan to deploy Microsoft Entra Permissions Management. You need to ensure that Permission Management can onboard Sub1. The solution must follow the principle of least privilege. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Could be Reader role? When you enabled Permissions Management in the Microsoft Entra tenant, an enterprise application for CIEM was created. Assign the Reader role to the CIEM application to allow Permissions management to read the Microsoft Entra subscriptions in your environment. https://learn.microsoft.com/en-us/entra/permissions-management/permissions-management-quickstart-guide#onboard-microsoft-azure

   Source: Adapted from community discussion — northgaterebel

   References

   • Microsoft Learn

   

   Next question

7. Question 367 · 394 in bank

   SIMULATION - Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username:admin@XXYyz112233.onmicrosoft.com Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only: Lab Instance: 99999999 - You need to configure the Group Administrator role to meet the following requirements: • Ensure that Allan Deyoung can approve and reject requests to activate the role. • Ensure that Christie Cline can request activation of the role. • Use the principle of least privilege. To complete this task, sign in to the appropriate admin center.

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   Explanation

   Incorrect : You need to configure the Group Administrator role to meet the following requirements: • Ensure that Allan Deyoung can approve and reject requests to activate the role. • Ensure that Christie Cline can request activation of the role. • Use the principle of least privilege. To configure the Group Administrator role to meet the specified requirements, follow these steps: Sign in to the Microsoft Entra admin center as at least a Privileged Role Administrator. Navigate to Azure AD Privileged Identity Management (PIM). Select Azure AD roles. Find and select the Group Administrator role. Under Assignments, select Add assignments. Assign Allan Deyoung as an Approver for the Group Administrator role. Assign Christie Cline as an Eligible user for the Group Administrator role. This configuration ensures that Allan Deyoung can approve and reject requests to activate the role, and Christie Cline can request activation of the role, all while adhering to the principle of least privilege.

   Source: Adapted from community discussion — anbocer

   

   Next question

8. Question 368 · 394 in bank

   Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 tenant. You have 100 IT administrators who are organized into 10 departments. You create the access review shown in the exhibit. (Click the Exhibit tab.)

   

   You discover that all access review requests are received by Megan Bowen. You need to ensure that the manager of each department receives the access reviews of their respective department. Solution: You create a separate access review for each role. Does this meet the goal?

   • AYes
   • BNo

   Show answer

   Answer: B

   Explanation

   No - each access review would still send review approval to Megan as no manager has been set for the user accounts under review.

   Source: Adapted from community discussion — Eltooth

   Next question

9. Question 369 · 394 in bank

   HOTSPOT - You have a Microsoft Entra tenant that contains the users shown in the following table.

   

   You add the following assignment for the User Administrator role: • Scope type: Directory • Selected members: Group1 • Assignment type: Active • Assignments starts: August 15, 2022 • Assignment ends: December 15, 2022 You add the following assignment for the Exchange Administrator role: • Scope type: Directory • Selected members: Group2 • Assignment type: Eligible • Assignments starts: October 15, 2022 • Assignment ends: January 15, 2023 For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.

   

   This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

   Show the answer figure

   Answer: See figure below

   

   Next question

10. Question 370 · 394 in bank

    HOTSPOT - You have an Azure subscription that uses Microsoft Entra Permissions Management. You have an Amazon Web Services (AWS) account. You plan to connect Permissions Management to AWS. You need to create a Permissions Management app in Azure. How should you complete the PowerShell command? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.

    

    This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.

    Show the answer figure

    Answer: See figure below

    

    Next question

Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page

SC-300 practice, question 361. 394 questions available.