Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 8 discussion

Actual exam question from Microsoft's AZ-500

Question #: 8
Topic #: 2

DRAG DROP -
You need to configure an access review. The review will be assigned to a new collection of reviews and reviewed by resource owners.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer

Suggested Answer:

Step 1: Create an access review program
Step 2: Create an access review control
Step 3: Set Reviewers to Group owners
In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their own access. If the resource is a group, you can ask the group owners to review.

References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-programs-controls

by RupaliS at Dec. 29, 2019, 3:07 a.m.

Comments

Submit Cancel

PDR

Highly Voted 5 years, 4 months ago

The answer is correct. The question itself refers to assigning a "collection of reviews" which means a access review program. In order to assign a program to a access review it must first be created , otherwise only the default program can be assigned. So that is why it is first step.

upvoted 46 times

BobIsSearchingForTheMoon

5 years, 4 months ago

I agree with PDR, and notice that it says "The review will be assigned to a NEW collection of reviews". So new collection means the collection "program" needs to be created first.

upvoted 6 times

...

FK2974

Highly Voted 4 years, 4 months ago

correct ! Program/Control/Owner

upvoted 16 times

...

SofiaLorean

Most Recent 4 months, 2 weeks ago

The answer is correct!

upvoted 1 times

...

stonwall12

5 months, 1 week ago

Answer: The correct sequence is: 1. Create an access review program 2. Create an access review control 3. Set Reviewers to Group owners Reason: When configuring access reviews in Azure AD: 1. Create an access review program which serves as the container for your reviews 2. Create an access review control which defines the scope and settings of the review 3. Set the reviewers to Group owners since the requirement states it should be reviewed by resource owners Reference: https://learn.microsoft.com/en-us/azure/active-directory/governance/create-access-review

upvoted 1 times

...

bob_sez

1 year, 8 months ago

I just took my exam on 25th Nov 2023 and I wasnt aware that this is an open book exam. I am not sure if this comment will be approved, but you can open Learn.microsoft.com during the exam and do your research for any question.

upvoted 6 times

MPB

1 year, 2 months ago

https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870 That's Hilarious guys)))

upvoted 1 times

...

dc864d4

1 year, 2 months ago

Open book not in the traditional sense. It's timed, proctored and the only resource is Microsoft Learn.....but that does help. Right now the test would be pretty difficult to pass without a resource as they are in process of making major changes.

upvoted 1 times

...

UjunwaRejoice

1 year, 6 months ago

RAEALLY?, YOU WONT BE PENALISED FOR IT?

upvoted 2 times

...

yonie

1 year, 7 months ago

You just blew my mind

upvoted 1 times

...

ArchitectX

1 year, 10 months ago

right answer

upvoted 2 times

...

Andre369

2 years, 2 months ago

To configure an access review assigned to a new collection of reviews and reviewed by resource owners, you should perform the following three actions in sequence: Create an access review program Set Reviewers to selected users Set Reviewers to Group owners These actions ensure that an access review program is created, reviewers are specified as selected users, and the reviewers are set to the owners of the relevant groups.

upvoted 1 times

xRiot007

1 year ago

Inside a program you need a Control.

upvoted 1 times

...

majstor86

2 years, 4 months ago

1. Create program 2. Create control 3. Set reviewers to Group owners

upvoted 4 times

...

ltjones12

2 years, 6 months ago

Really disappointed with how nobody in exam topics seems to be cleaning up or upgrading their deprecated questions

upvoted 9 times

...

mung

2 years, 7 months ago

Damn why there are so many deprecated question on AZ-500? Az-104 was fine..

upvoted 2 times

D3D1997

2 years, 5 months ago

coz AZ-500 had never its number changed; AZ-104 is newer, AZ-305 is the sequel to AZ-300/301 (2018/2019) AZ-303/304 (2020/2021)... so should be a AZ-503 by now...

upvoted 3 times

...

JohnBentass

2 years, 8 months ago

The answer is correct

upvoted 1 times

...

OpsecDude

2 years, 10 months ago

Hey guys. I just created an access review and all I did was: 1_Create the Access review from Identity Governance (no longer on "Access Review" plus no onboarding needed) 2_ Set reviewers. Then off course I set up what happens with reviewees if reviewers don't respond, durations, etc, but no access review control

upvoted 4 times

...

Patchfox

3 years, 7 months ago

Is this question up to date? I can't find any documentation about programs. The added links forword me to the documentation of access review, not programs. I saw in the Identity Governance the Program section. Is this still a recommended feature or near to the end of life?

upvoted 2 times

Joshing

3 years, 5 months ago

I believe this is deprecated. I found a link to the Microsoft Graph API beta where it shows the Access Review Program and it's under the deprecated section. With the new api for Access Reviews as showing V2 in the url. https://docs.microsoft.com/en-us/graph/api/resources/program?view=graph-rest-beta

upvoted 5 times

Joshing

3 years, 5 months ago

I was wrong this completely exists... If anyone else is looking for the location of this, it is found here - https://portal.azure.com/#blade/Microsoft_AAD_ERM/DashboardBlade/Programs There is basically no documentation on it but it is similar to Catalogs for access packages. Just a logical container for storing access reviews.

upvoted 2 times

Joshing

3 years, 5 months ago

My brain is like mush from studying this exam. Apologies.

upvoted 6 times

...

rohitmedi

3 years, 7 months ago

correct answer

upvoted 3 times

...

justinp

4 years ago

this question is present in test today

upvoted 4 times

...

milind8451

4 years, 5 months ago

Right ans.

upvoted 1 times

...

sureshatt

4 years, 5 months ago

With the new UI (2021.02.12) it is very hard to answer this question since the terms are not 100% aligning with the terms in the new UI. But still the answer provided here is correct. 1. Since the question talks about creating a collection of access reviews, we first need to create an access review programme. 2. Then we have to create an access review (here I have to assume 'access review control' = 'access review'). 3. Question says the "resource owners" should perform the review. Here the owners can be Group owner role. Therefore assignment should be to group owners. (I honestly thinks that the word "resource" was used just to confuse us)

upvoted 8 times

sureshatt

4 years, 3 months ago

as of today, 2021.03.28, access review programs and access review controls do not exists. Only access reviews exists.

upvoted 6 times

WMG

3 years, 3 months ago

Wrong. Programs exists under Home>Identity Governance>Programs. We use this regularly.

upvoted 1 times

...

micofucho

4 years ago

What if the review is for Applications??, the questions says anything about if the review is on Teams and Groups or Applications. Then, who is the owner?? The question is rubbish, like a lot of questions in the exam: ambiguous, mal formed and with thousands of interpretations. It's not a problem of trying to confuse, it's a problem of a stupid person formulating the questions for the exam.

upvoted 1 times

...

Load full discussion...