Microsoft Identity and Access Administrator394 questions across 40 pages are complete and free, with no account or card.
394 questions in this bank
Free access · progress saved on this device
You have a Microsoft Entra tenant that uses Microsoft Entra ID Premium licenses. You plan to configure a terms of use (ToU) for the tenant. You need to upload the ToU document. Which format should you use for the document?
Answer: C
You have a Microsoft 365 E5 subscription. You need to ensure that users are prompted to accept a custom terms of use (ToU) agreement when they sign in to the subscription. What should you configure?
Answer: B
Organizations can use terms of use along with Conditional Access policies to require employees or guests to accept your terms of use policy before getting access. https://learn.microsoft.com/en-us/entra/identity/conditional-access/terms-of-use#add-terms-of-use
Source: Adapted from community discussion — 63b6a4b
You have a Microsoft 365 E5 subscription. You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains a user named User1. You plan to deploy Microsoft Entra Permissions Management. You need to ensure that User1 can onboard the Azure subscription to Permissions Management. The solution must follow the principle of least principle. Which Microsoft Entra role should you assign to User1?
Answer: A
Task Least privileged role Additional roles Tenant onboarding Permissions Management Administrator Onboard cloud environments Permissions Management Administrator Assign permissions in Microsoft Entra Permissions Management Permissions Management Administrator Start trial and buy Microsoft Entra Permissions Management licenses Billing Administrator https://learn.microsoft.com/en-us/entra/identity/role-based-access-control/delegate-by-task#permissions-management
Source: Adapted from community discussion — 63b6a4b
You have an Azure subscription named Sub1. You purchase a Microsoft Entra Permissions Management license. You need to onboard Permissions Management. Which two actions should you perform? Each correct answer presents part of the solution. NOTE: Each correct selection is worth one point.
Answer: BC
HOTSPOT - You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table.
Group2 is a member of Group1. You configure an access review that has the following settings: • Name: Review1 • Select what to review: Teams + Groups • Review scope: Select Teams + groups • Group: Group1 • Scope: Guest users only • Select reviewers: Group owners(s) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
HOTSPOT - You have a Microsoft Entra tenant that contains the identities shown in the following table.
Group1 has the following configurations: • Owners: User1, User4 • Members: User1, Managed2, Group2 You create an access review that has the following settings: • Name: Review1 • Review scope: Select Teams + Groups • Group: Group1 • Scope: All users • Select reviewers: Group owner(s) The Fallback reviewers setting is NOT configured. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
I think it should be: NYN. 1. when Group owner(s) are assigned as reviewers, they cannot review their own access. 2. User1, as an owner of Group1 and the assigned reviewer, has the ability to review the access of all members within the group except themselves. 3. By default, nested group members are not included in access reviews. Only direct members of the group are subject to the review.
Source: Adapted from community discussion — Oskarma
HOTSPOT - You have a Microsoft Entra tenant that contains a user named User1. You have an Azure subscription named Sub1. User1 is assigned the Owner role for Sub1. You need to ensure that User1 can onboard Sub1 to Permissions Management. The solution must follow the principle of least privilege. Which role should you assign for Sub1, and which role should you assign to User1 for the tenant? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
Note: This question is part of a series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution. After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen. You have a Microsoft 365 tenant. You have 100 IT administrators who are organized into 10 departments. You create the access review shown in the exhibit. (Click the Exhibit tab.)
You discover that all access review requests are received by Megan Bowen. You need to ensure that the manager of each department receives the access reviews of their respective department. Solution: You modify the properties of the IT administrator user accounts. Does this meet the goal?
Answer: A
A - Yes. Megan Bowen is receiving the access reviews because no Managers are set for those users under Job Info, she is the fallback reviewer. If you set the Manager value to a user, this user will receive the review instead of Megan Bowen.
Source: Adapted from community discussion — JerryGolais
HOTSPOT - You have an Azure subscription that is onboarded to Microsoft Entra Permissions Management. You need to perform the following actions: • Identify billable Azure resources. • Create a rule to remove permissions for unused resources. Which two options should you use in the Entra Permissions Management portal? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point.
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
HOTSPOT - You have an Azure subscription that is linked to a Microsoft Entra tenant. The tenant contains the identities shown in the following table.
The tenant is onboarded to Permissions Management. You create the Azure resources shown in the following table.
From Microsoft Entra Insights, which identity will be included in Accounts assigned to highly privileged roles, and which identity will be included in Service principals with privileged role assignments?
This is an interactive task on the real exam — a drag-and-drop, hotspot or ordering question. There is nothing to select here, so the answer is shown below for reference.
Answer: See figure below
BOX 1: Group2 BOX 2: Managed2 tested!!! "Select Review highly privileged roles or Review service principals to review information on principal role assignments for the following roles: Application Administrator, Cloud Application Administrator, Exchange Administrator, Intune Administrator, Privileged Role Administrator, SharePoint Administrator, Security Administrator, User Administrator." https://learn.microsoft.com/en-us/entra/permissions-management/product-privileged-role-insights
Source: Adapted from community discussion — Djemme
Keyboard:J Kmove between questionsA–Dselect an answerRshow or hide the answer← →change page
SC-300 practice, question 371. 394 questions available.
Version 1.0.0. How we source questions
