Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 4 question 44 discussion

Actual exam question from Microsoft's SC-300

Question #: 44
Topic #: 4

HOTSPOT -

You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3.

You have two Azure AD roles that have the Activation settings shown in the following table.

The Azure AD roles have the Assignment settings shown in the following table.

The Azure AD roles have the eligible users shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by KrissB at Aug. 14, 2023, 9:43 p.m.

Comments

Submit Cancel

northgaterebel

Highly Voted 1 year, 9 months ago

N - Approvers cannot approve their own role activation requests (Topic 4 Question 34) N - User1 is not an approver for Role2 N - Justification is not required for Role1

upvoted 21 times

northgaterebel

1 year, 9 months ago

N, N, Y. changed my mind. Require justification on active assignment is Yes for Role 1. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment

upvoted 16 times

Alcpt

1 year ago

NO! The approver (U1) does not have to provide the justification. The user (u2) requesting access has to provide justification.

upvoted 4 times

...

Logitech

1 year, 8 months ago

1. NO - just, tested it. You cannot approve your own request, it is not even visable under "approve requests" 2. No of course. 3.Yes - can not approve without justificaiton

upvoted 10 times

Alcpt

1 year ago

read the question dude, its not asking whether justification is required. its asking whether the approver (u1) needs to do the justification. u1 does NOT do the justification, it must be u2. its scary how many learners here have not actually deployed and configured PIM to understand the components but make guesses.

upvoted 5 times

...

[Removed]

1 year, 2 months ago

User 2 doesn't have Role 1 yet, so the assignment is eligible and not active, so it should be No...like you said the first time :)

upvoted 3 times

...

Load full discussion...

...

SumitSahoo

Highly Voted 1 year, 8 months ago

1. No - User 1 is not getting the request to approve. hence the request is always in a pending state. and unless approved, the role will not be added. 2. No - User1 is not an approver for Role2 3. Yes - User 1 needs to provide a justification while approving the requests.

upvoted 11 times

Nail

7 months, 1 week ago

NNN. The justification comes from the user, not the approver. "Require justification on active assignment You can require that users enter a business justification when they create an active (as opposed to eligible) assignment." https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment

upvoted 2 times

...

d1e85d9

Most Recent 2 months, 2 weeks ago

NO NO YES

upvoted 1 times

...

YesPlease

2 months, 3 weeks ago

1) NO, users can not approve their own requests. 2) NO, User1 is only able to approve for Role1 and not for Role2 3) YES, "Require justification on active assignment" is turned ON

upvoted 1 times

...

anonymousarpanch

4 months, 2 weeks ago

N,N,Y..the below provided link for northgaterebel is correct on point no. 1, . Point no.2 is easy. Point no. 3, you can refer https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment; or https://learn.microsoft.com/en-us/answers/questions/1636124/pim-mandatory-justification-when-approving-request

upvoted 1 times

...

khangkowng1

5 months, 3 weeks ago

Tested in Lab environment. Question #3 is Yes. Approver is prompted for a justification to approve role activation requst.

upvoted 2 times

...

penatuna

11 months, 3 weeks ago

Tested by me: NO Approvers are not able to approve their own role activation requests. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-approval-workflow#approve-requests NO User1 is not an approver for Role2. Also, “Require approval to activate” is set to No, so for this role User3 does not need approver. YES No matter what activation / assignment settings you use, Justification seems to be mandatory when Approving Request. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment

upvoted 2 times

...

Nyamnyam

1 year, 6 months ago

NNN. Question 3 is "to approve the request of User2", who is in table 3 configured for "Eligible assignment". So when he triggers a request to activate the role for him, only "Require justification on activation" is evaluated. And it is set to "No" in table 1.

upvoted 6 times

hml_2024

9 months ago

I also think the answers are N, N, N

upvoted 1 times

...

KrissB

1 year, 9 months ago

I thought you can't self approve, so why would the User 1 request for Role one be automatically approved?

upvoted 2 times

...