For those who are saying the correct answer is "C" Modify Active Assignment, where does it say the Role is assigned as Active? Don't assume things if the Use Case doesn't specify that unless is the default configuration!
Using the information provided in the study case, The correct answer is D - Role settings.
That's what the situation description says "Currently, Helpdesk Administrators can perform tasks with the User Administrator role without justification or approval." so the active assignment is active so the correct answer is C
If you go to Active Assignments it's a list of users assigned the role. Then you would need to modify each one, but then that doesn't do anything to prevent new requests from without justification or approval.
Got to Role settings to make that change.
If you go to ro
It says implementing planned changes, which would only apply going forward so roles would be correct, however in the real world, you would do both as currently using means active assignments. However, the MS answer is D.
Role Setting details is where you need to be: Role setting details - User Administrator
Privileged Identity Management | Azure AD roles
Default Setting State
Require justification on activation Yes
Require ticket information on activation No
On activation, require Azure MFA Yes
Require approval to activate No
Approvers None
Azure Portal> Azure AD> Identity Governance > (Privileged Identity Management-Heading)Azure AD Roles> (Manage-Heading) Settings > Search for User Administrator > Edit> Require justification on activation : Yes and Require approval to activate: Yes
Or in the documentation here:
https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings
Spent a few minutes debating this until I found this. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-change-default-settings
There are 3 pieces of data that are relevant. In the overview, it states:
Contoso uses Azure AD Privileged Identity Management (PIM) to protect administrative roles.
Under problem statement is:
Currently, the helpdesk administrators can perform tasks by using the User administrator role without justification or approval.
Under planned changes is:
Configure the User administrator role to require justification and approval to activate.
The question is how to meet the planned changes, which is to configure the user administrator role. So Answer D can be the only logical choice.
D. Modify Role settings - "Configure the User administrator role to require justification and approval to activate." So need to modify the AD Role settings and change to eligible and require justification to yes. Notice that it is in the Azure AD role section.
https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-add-role-to-user?tabs=new
Correct: C. Modify Active assignments.
Planned Changes --> Configure the User administrator role to require justification and approval to activate. --> answer should be around PIM -- which makes "Modify Active assignments" is the only correct answer.
This section is not available anymore. Please use the main Exam Page.SC-300 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Che1
Highly Voted 3 years, 4 months agoHot_156
2 years, 1 month agoWazery
8 months, 3 weeks agoOdy
8 months, 1 week agoEr_01
8 months, 3 weeks agoDomza
Highly Voted 3 years, 4 months agotryade
Most Recent 1 month, 3 weeks agoHartMS
6 months, 2 weeks agoHartMS
7 months agomarsot
1 year, 3 months agodule27
1 year, 3 months agoTafMuko
1 year, 4 months agosbnpj
1 year, 6 months agoAWS56
1 year, 8 months agowooyourdaddy
1 year, 9 months agojack987
1 year, 10 months agoestyj
1 year, 10 months agoJhill777
1 year, 11 months agoLion007
2 years, 3 months agorachee
2 years, 3 months agosubhuman
2 years, 4 months ago