Exam MS-500 topic 1 question 78 discussion

Actual exam question from Microsoft's MS-500

Question #: 78
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains three users named Use1, User2, and User3.

You have Azure Active Directory (Azure AD) roles that have the role activation settings shown in the following table.

You have Azure AD roles that have the role assignment settings shown in the following table.

The Azure AD roles have eligible users assigned as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by examtopics11 at March 1, 2023, 1:45 a.m.

Comments

Submit Cancel

JoeP1

Highly Voted 2 years, 4 months ago

I think the answers should be N/N/N. 1. (No) Approvers can't approve their own activation request. 2. (No) Role2 does not need approval to activate. 3. (No) Justification is not needed for activation approval of Role1. Justification is only needed when eligibility assignment is made with activation included(ie permanent activation). Use of the term 'Assignment Request' in the questions is confusing.

upvoted 12 times

...

formazionehs

Most Recent 2 years, 3 months ago

Box 1: No https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/azure-ad-pim-approval-workflow Approvers are not able to approve their own role activation requests. Box 2: No Role 2 has Require approval to activate: No Box 3: Yes Require justification on active assignment: Yes https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings You can require that users enter a business justification when they create an active (as opposed to eligible) assignment (activate a role for a user).

upvoted 2 times

...

examtopics11

2 years, 4 months ago

NNY 1. Approvers are not able to approve their own role activation requests https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/azure-ad-pim-approval-workflow 2. Role2 "Require approval to activate" = No 3. I think the key word is "assignment request of User2.

upvoted 3 times

kmk_01

2 years, 3 months ago

But why and how would the approver User1 provide justification?

upvoted 1 times

...