Exam SC-300 topic 4 question 88 discussion

Actual exam question from Microsoft's SC-300

Question #: 88
Topic #: 4

HOTSPOT
-

You have a Microsoft Entra tenant that contains the identities shown in the following table.

Group1 has the following configurations:

• Owners: User1, User4
• Members: User1, Managed2, Group2

You create an access review that has the following settings:

• Name: Review1
• Review scope: Select Teams + Groups
• Group: Group1
• Scope: All users
• Select reviewers: Group owner(s)

The Fallback reviewers setting is NOT configured.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by Oskarma at Feb. 11, 2025, 4:10 p.m.

Comments

Submit Cancel

d1e85d9

3 months ago

No Yes Yes

upvoted 1 times

...

YesPlease

3 months, 1 week ago

1) NO, cannot approve access review for yourself 2) YES, you can perform an access review for manage identities. 3) YES, USER3 is Group2...which is a member of Group1.

upvoted 1 times

...

rvln7

3 months, 3 weeks ago

User1 can perform an access review for User1? → No Generally, users cannot review their own access in Entra access reviews. User1 can perform an access review for Managed2? → Yes Managed2 is a member of Group1, and User1 is a designated reviewer. So, User1 can review Managed2’s access. User1 can perform an access review for User3? → Yes - User3 is a member of Group2, and Group2 is a member of Group1 (nested group scenario). - Since the review scope includes "All users", nested members are included. - As an owner of Group1, User1 can review all direct and nested members. i think that we can review members of nested groups, but we can automatically remove their access

upvoted 1 times

rvln7

3 months, 3 weeks ago

"...we can NOT automatically remove thir access."

upvoted 1 times

...

Oskarma

4 months, 1 week ago

I think it should be: NYN. 1. when Group owner(s) are assigned as reviewers, they cannot review their own access. 2. User1, as an owner of Group1 and the assigned reviewer, has the ability to review the access of all members within the group except themselves. 3. By default, nested group members are not included in access reviews. Only direct members of the group are subject to the review.

upvoted 3 times

...