Exam MS-102 topic 1 question 280 discussion

The answer for last one is option 3.

Box1=3 Set Allow Permanent Eligible Assignments to YES Box2=1 Select Require Justification on Activation Box3=3 Set Require Azure Multi-Factor Authentication on the Active Assignments to YES

Given answers are correct

Given answer is correct: Set Allow permanent eligible assignment to yes Set Require justification on activation On activation, require multifactor authentication The third option means you can require users who are eligible for a role to prove who they are by using the multifactor authentication feature in Microsoft Entra ID before they can activate. This option is not correct: Require multifactor authentication on active assignment - You can require that administrators provide multifactor authentication when they create an active (as opposed to eligible) assignment. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings

given answer is correct.

1. Always be able to request the User Administrator role: Set Allow permanent eligible assignment to yes. This allows users to always request the role without needing approval. 2. Must provide a reason when requesting the User Administrator role: Select Require justification on activation. This ensures users provide a reason when activating the role. 3. Must require MFA when activating the User Administrator role: Set On activation, require Azure MFA to ensure MFA is used during role activation.

Correct https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-how-to-change-default-settings