Exam SC-300 topic 1 question 67 discussion

Actual exam question from Microsoft's SC-300

Question #: 67
Topic #: 1

You have an Azure AD tenant that contains a user named User1 and a Microsoft 365 group named Group1. User1 is the owner of Group1.

You need to ensure that User1 is notified every three months to validate the guest membership of Group1.

What should you do?

A. Configure the External collaboration settings.
B. Create an access review.
C. Configure an access package.
D. Create a group expiration policy.

Show Suggested Answer

Suggested Answer: B 🗳️

by einkaufacs at Nov. 2, 2023, 8:45 p.m.

Comments

Submit Cancel

haazybanj

Highly Voted 1 year, 7 months ago

Selected Answer: B

The answer is B. Create an access review. An access review is a process that allows you to review and manage the access of users and groups to resources. You can use access reviews to validate the guest membership of Group1 every three months.

upvoted 12 times

...

hml_2024

Most Recent 9 months, 3 weeks ago

B is correct.Access reviews in Azure AD allow you to schedule regular reviews of group memberships, including guest users. By setting up an access review, User1, as the owner of Group1, can be notified to validate the guest memberships periodically (e.g., every three months).

upvoted 1 times

...

loukyexamtopic

10 months, 3 weeks ago

I would go for B too, but it is actually D people. Check:https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide

upvoted 1 times

penatuna

10 months, 3 weeks ago

No, it's not. Group expiration policy can help remove inactive groups, not to validate the guest membership of Group.

upvoted 1 times

...

Nazir97

1 year, 7 months ago

Selected Answer: B

Access review

upvoted 1 times

...

penatuna

1 year, 7 months ago

Selected Answer: B

A. External collaboration settings let you specify what roles in your organization can invite external users for B2B collaboration. These settings also include options for allowing or blocking specific domains, and options for restricting what external guest users can see in your Microsoft Entra directory. B. Access reviews in Microsoft Entra ID, part of Microsoft Entra, enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed regularly to make sure only the right people have continued access.

upvoted 2 times

penatuna

1 year, 7 months ago

C. An access package is a bundle of resources that a team or project needs and is governed with policies. Access packages are defined in containers called catalogs. To reduce the risk of stale access, you should enable periodic reviews of users who have active assignments to an access package in entitlement management. You can enable reviews when you create a new access package or edit an existing access package assignment policy. D. Group expiration policy can help remove inactive groups from the system and make things cleaner. It only removes inactive groups, it will NOT validate guest membership of group. https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview https://learn.microsoft.com/en-us/entra/external-id/external-collaboration-settings-configure https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-reviews-create https://learn.microsoft.com/en-us/microsoft-365/solutions/microsoft-365-groups-expiration-policy?view=o365-worldwide

upvoted 4 times

...

einkaufacs

1 year, 7 months ago

Selected Answer: B

Validatating a membership is access review, in my opinion.

upvoted 3 times

...