Exam 70-341 topic 1 question 69 discussion

Actual exam question from Microsoft's 70-341

Question #: 69
Topic #: 1

You need to create an exclusion for two helpdesk RBAC (Role Based Access Control) groups to not have access to managers.
You will need to pick 3 PowerShell commands from the available choices

A. New-ManagementRole, New-ManagementScope,Set-ManagementScope (Guessed)
B. New-ManagementScope, RecipientRestrictionFilter ,New-ManagementRoleAssignment (Guessed)
C. New-ManagementScope, New-ManagementRoleAssignment, CustomRecipientWriteScope (Guessed)
D. Unsure of commands and correct answer

Show Suggested Answer

Suggested Answer: C 🗳️
C: Microsoft recommends that you:
✑ define the scope,
✑ then the role,
✑ then the role group, and finally,
✑ the role assignment.
Management role scopes enable you to define the specific scope of impact or influence of a management role when a management role assignment is created.
When you apply a scope, the role assignee assigned to the role can only modify the objects contained within that scope.
A role assignee can be a management role group, management role, management role assignment policy, user, or universal security group (USG). For more information about management roles, see Understanding Role Based Access Control.
References:

by [deleted] at April 4, 2025, 5:37 a.m.

Comments

Submit Cancel

Currently there are no comments in this discussion, be the first to comment!