Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 112 discussion

Actual exam question from Microsoft's AZ-500

Question #: 112
Topic #: 2

HOTSPOT
-

You have a Microsoft Entra tenant that contains the users shown in the following table.

You configure the Temporary Access Pass settings as shown in the following exhibit.

You add the Temporary Access Pass authentication method to Admin2.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Nava702 at April 1, 2024, 8:09 p.m.

Comments

Submit Cancel

chiquito

Highly Voted 1 year, 4 months ago

Think the answer is correct. User1 is not a member of Group1 Create a Temporary Access Pass After you enable a TAP policy, you can create TAPs for users in Microsoft Entra ID. These following roles can perform various actions related to a TAP. • Global Administrators can create, delete, and view a TAP for any user (except themselves). • Privileged Authentication Administrators can create, delete, and view a TAP for admins and members (except themselves). • Authentication Administrators can create, delete, and view a TAP for members (except themselves). • Global Readers can view TAP details for the user (without reading the code itself). Reference: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass

upvoted 5 times

...

Hot_156

Most Recent 5 months, 1 week ago

N - Once you generate the TAP, you cannot see it again! Not even if you are GA. Y - Priviledge Authentication Admin can add the user1 to the TAP and then generate a TAP. Y- Priviledge Authentication Admin can generate a TAP for any user

upvoted 1 times

Hot_156

5 months, 1 week ago

Be aware that I LAB! this N - Still no. Once the code is generated, you cannot see it again. It is like a secret code from an app. N - If the user is not a member of the group, it will fail when trying to generate a TAP. Y - Same as before

upvoted 3 times

...

pentium75

1 year ago

YES - Global Admin can view TAP of any user except himself NO - User1 is not included in the policy, and Privileged Authentication Administrator cannot modify the policy YES - Privileged Role Administrator can modify authentication methods for administrator

upvoted 3 times

sauliusm

7 months, 1 week ago

YYY The question does not ask if user1 can use the TAP, but if Admin can create it, which he can. 'Although you can create a TAP for any user, only users included in the policy can sign-in with it https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass#enable-the-temporary-access-pass-policy

upvoted 2 times

...

Jimmy500

1 year, 1 month ago

Privileged Authentication Administrators can create, delete, and view a TAP for admins and members (except themselves).So YYY

upvoted 1 times

...

Pamban

1 year, 3 months ago

I think Answer is YYY 2nd option: Privileged Authentication Administrators can create, delete, and view a TAP for admins and members (except themselves). which means Privileged Authentication Administrator can add TAP for user1 Link: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass

upvoted 3 times

pentium75

1 year ago

No, User1 is not in the group that the TAP policy is assigned to. Privileged Authentication Administrator cannot modify the TAP policy to include User1, and he can also not add User1 to the group.

upvoted 1 times

...

elster

1 year, 4 months ago

Correct: Y N Y https://learn.microsoft.com/en-us/entra/identity/authentication/howto-authentication-temporary-access-pass

upvoted 3 times

...