You have a Microsoft 365 E5 subscription that contains the groups shown in the following table. You plan to implement privileged access in Microsoft 365. Which groups can you specify as the default approval group?
In Microsoft 365, the default approval group is used to specify a group of users who can approve access requests for privileged roles. To implement privileged access in Microsoft 365 and specify the default approval group, you can select any of the following groups:
C. Group1, Group2, Group3, or Group4
Explanation:
All the groups mentioned in the table can be used as the default approval group for privileged access in Microsoft 365. The default approval group should be composed of users who are authorized to approve access requests for privileged roles in your organization. Therefore, you can choose any of the groups to be the default approval group based on your organization's policies and requirements.
C is correct
If the security group does not have an email address associated with it, you can still use it as the default approval group for privileged access in Microsoft 365.
When you select a security group as the default approval group, Azure AD Privileged Identity Management will send approval notifications to the members of the security group using their individual email addresses. The email notifications will contain a link to the approval request in the Azure portal, where the members can review the request and approve or deny it.
So even if the security group itself does not have an email address, the members of the group will still receive email notifications for any access requests that require approval. However, it's important to ensure that the members of the security group have valid email addresses associated with their user accounts in Azure AD, so that they can receive the approval notifications.
According to this link it is 3. Email enabled security group.
https://docs.microsoft.com/en-us/microsoft-365/compliance/privileged-access-management-configuration?view=o365-worldwide#step1:~:text=Select%20mail%2Denabled%20security%20group
I believe that you are correct if you go by the letter of the document, but the thing is there's no option with Group 3 only.
upvoted 1 times
...
...
This section is not available anymore. Please use the main Exam Page.MS-500 Exam Questions
Log in to ExamTopics
Sign in:
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
HartMS
Highly Voted 2 years, 6 months agodoody
2 years, 5 months agoWedge34
Highly Voted 2 years, 6 months agoabrub
Most Recent 2 years, 1 month agoJonha
2 years, 2 months agoabill
2 years, 3 months agoskycrap
2 years, 4 months agochzon
2 years, 4 months agoAnonymousse
2 years, 6 months agoRJ06
2 years, 6 months agoJimboJones99
2 years, 7 months agoTottan
2 years, 6 months agoDan91
2 years, 8 months agoEzeQ
2 years, 6 months ago