Exam MS-100 All Questions

View all questions & answers for the MS-100 exam

Exam MS-100 topic 4 question 53 discussion

Actual exam question from Microsoft's MS-100

Question #: 53
Topic #: 4

HOTSPOT -
Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription.
Contoso.com contains the users shown in the following table.

You add an enterprise application named App1 to contoso.com.
You configure the following self-service settings for App1:
✑ Allow users to request access to this application is set to Yes.
✑ To which group should assigned users be added is set to Group1.
✑ Who is allowed to approve access to this application is set to User2.
✑ Require approval before granting access to this application is set to Yes.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Box 1: Yes.
User1 can request access to App1 because ג€Allow users to request access to this applicationג€ is set to Yes.
Box 2: No.
User2 is an approver. If User2 requests access to App1, he will still need to approve the request before he is added to Group1.
Box 3: Yes.
User2 can approve requests for App1 because ג€Who is allowed to approve access to this applicationג€ is set to User2.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-self-service-access

by Sprinqfield at May 27, 2021, 9:52 p.m.

Comments

Submit Cancel

Sprinqfield

Highly Voted 4 years ago

I guess, its N, N, Y. User1 already member with Group1

upvoted 11 times

michszym

3 years, 11 months ago

User1 won't see "Request Access" button if he is already in Group1?

upvoted 1 times

michszym

3 years, 10 months ago

I've made test - Answers will be: NYY Box1 - user already in Group1 can see App1 in MyApps and cannot see on list to requested App so he cannot request them once again Box2 - user2 is automatically added to Group1 when he request App1 Box3 obviously Y

upvoted 15 times

Chipper

3 years, 10 months ago

This is my thinking as well. If user2 is an approver and user2 asks for the app, wouldn't it be auto approved? Is there another approver that needs to approve these types of requests?

upvoted 1 times

Durden871

3 years, 3 months ago

✑ To which group should assigned users be added is set to Group1. ✑ Require approval before granting access to this application is set to Yes. Even though User 2 is an approver, it isn't a member of Group 1 and to join you need to accept the approval. I would say box one should be no. Why would you be able to request access to an app you already have access to?

upvoted 1 times

...

Startkabels

Most Recent 2 years, 6 months ago

Doesn't it read that assigned users are added to group 1 and not that the app is assigned to group 1? I'd say Y N Y

upvoted 3 times

Startkabels

2 years, 6 months ago

Checked in production: Enterprise apps are assigned to users unders Users/Groups. This question is referring to the setting under Self-service that allows you to add users to a selected group after their request for the app is approved.

upvoted 1 times

...

Steffanle

2 years, 7 months ago

https://learn.microsoft.com/en-us/azure/active-directory/governance/review-your-access

upvoted 1 times

...

joergsi

3 years, 4 months ago

The answer is YYY https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/tenant-allow-block-list?view=o365-worldwide#url-syntax-for-the-tenant-allowblock-list - Wildcards (*) are allowed in the following scenarios: A left wildcard must be followed by a period to specify a subdomain. For example, *.contoso.com is allowed; *contoso.com is not allowed. => fabrikam*.com is not allowed! - The tilde (~) character is available in the following scenarios: A left tilde implies a domain and all subdomains. For example ~contoso.com includes contoso.com and *.contoso.com. because the ~ is not been used: => contoso.com would be blocked => us.contoso.com would NOT be blocked

upvoted 1 times

alex_p

3 years, 2 months ago

dude, you are commenting something different!

upvoted 12 times

...