Exam SC-300 topic 3 question 16 discussion

Actual exam question from Microsoft's SC-300

Question #: 16
Topic #: 3

You have an Azure Active Directory (Azure AD) tenant that contains the users shown in, the following table.

The User settings for enterprise applications have the following configurations:
✑ Users can consent to apps accessing company data on their behalf: No
✑ Users can consent to apps accessing company data for the groups they own: No
✑ Users can request admin consent to apps they are unable to consent to: Yes
Who can review admin consent requests: Admin2, User2

User1 attempts, to add an app that requires consent to access company data.
Which user can provide consent?

A. User1
B. User2
C. Admin1
D. Admin2

Show Suggested Answer

Suggested Answer: C 🗳️

by existingname at Sept. 1, 2022, 6:25 a.m.

Comments

Submit Cancel

oopspruu

Highly Voted 11 months, 1 week ago

Selected Answer: C

As of 9/6/2023: The selected reviewers can act on (review, block, deny) new admin consent requests. All users can block and deny admin consent requests, but only users with the Global, Application, or Cloud application administrator role can grant admin consent.

upvoted 5 times

...

indope94

Most Recent 3 months, 3 weeks ago

Selected Answer: D

Alleen users die EN reviewer zijn EN een geldige adminrol hebben, mogen admin consent aanvragen goedkeuren.

upvoted 1 times

...

Obi_Wan_Jacoby

4 months ago

Selected Answer: C

C looks correct. After researching this particualr scenario, the below list of roles is who can grant the access considering the settings. Global Administrator Privileged Role Administrator Application Administrator Cloud Application Administrator User Access Administrator Owner

upvoted 1 times

...

EmnCours

1 year ago

Selected Answer: C

Correct Answer: C

upvoted 4 times

...

dule27

1 year, 1 month ago

Selected Answer: C

C. Admin1

upvoted 3 times

...

jack987

1 year, 7 months ago

Selected Answer: C

The answer is correct - C. Admin1 Application Administrator To approve requests, a reviewer must be a global administrator, cloud application administrator, or application administrator. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/configure-admin-consent-workflow

upvoted 4 times

...

Jhill777

1 year, 8 months ago

Wrong. As a reviewer, you can view all admin consent requests but you can only act on those requests that were created after you were designated as a reviewer. https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/review-admin-consent-requests

upvoted 1 times

Jhill777

1 year, 8 months ago

Stand corrected. Link I posted is missing vital information that is only shown in the portal when you try to assign reviewers. "The selected reviewers can act on (review, block, deny) new admin consent requests. All users can block and deny admin consent requests, but only users with the Global, Application, or Cloud application administrator role can grant admin consent.

upvoted 4 times

...