Exam MS-500 topic 1 question 41 discussion

Actual exam question from Microsoft's MS-500

Question #: 41
Topic #: 1

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains the users shown in the following table.

You assign an enterprise application named App1 to Group1 and User2.
You configure an Azure AD access review of App1. The review has the following settings:
✑ Review name: Review1
✑ Start date: 01`"15`"2020
✑ Frequency: One time
✑ End date: 02`"14`"2020
✑ Users to review: Assigned to an application
✑ Scope: Everyone
✑ Applications: App1
✑ Reviewers: Members (self)
✑ Auto apply results to resource: Enable
✑ Should reviewer not respond: Take recommendations
On February 15, 2020, you review the access review report and see the entries shown in the following table:

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/perform-access-review

by billo79152718 at Sept. 18, 2022, 10:53 a.m.

Comments

Submit Cancel

kanag1

Highly Voted 2 years, 9 months ago

The given answers are correct. As per the link in the answer area: To make access reviews easier and faster for you, we also provide recommendations that you can accept with a single selection. There are two ways that the system generates recommendations for the reviewer. One method is by the user's sign-in activity. If a user has been inactive for 30 days or more, the system will recommend that the reviewer deny access.

upvoted 8 times

...

GatesBill

Most Recent 2 years, 3 months ago

The given answers are correct. Simply put as follows: - User1 gained (further) access through the access review. - No response was given for User2, so the recommended actions took place; which are checking last sign-in date (should be < 30 days) & checking peer's access (which is User1 in this case). As User2 HAS signed in within the past 30 days and its peer (User1) HAS access to the app, User2 will gain access also. - No response was given for User3, so the recommended actions took place. As User3 DID NOT sign in within the past 30 days and has no known peer which has access, User3's access will be revoked.

upvoted 3 times

...

josh_josh

2 years, 3 months ago

On Feb 20, 2020: User1 can access App1 - NO User2 can access App1 - NO User3 can access App1 - NO This is because User1 was reviewed as requiring access to App1 and last signed in on Feb 14, 2020, before the end of the review period. However, User2 did not respond to the review, so the "Take recommendations" option was applied, which means that their access to App1 will be revoked. User3 is a guest and was not assigned to App1, so they cannot access it.

upvoted 2 times

...