exam questions

Exam AZ-500 All Questions

View all questions & answers for the AZ-500 exam

Exam AZ-500 topic 2 question 8 discussion

Actual exam question from Microsoft's AZ-500
Question #: 8
Topic #: 2
[All AZ-500 Questions]

DRAG DROP -
You need to configure an access review. The review will be assigned to a new collection of reviews and reviewed by resource owners.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Show Suggested Answer Hide Answer
Suggested Answer:
Step 1: Create an access review program
Step 2: Create an access review control
Step 3: Set Reviewers to Group owners
In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their own access. If the resource is a group, you can ask the group owners to review.

References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-programs-controls

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
PDR
Highly Voted 4 years, 10 months ago
The answer is correct. The question itself refers to assigning a "collection of reviews" which means a access review program. In order to assign a program to a access review it must first be created , otherwise only the default program can be assigned. So that is why it is first step.
upvoted 45 times
BobIsSearchingForTheMoon
4 years, 10 months ago
I agree with PDR, and notice that it says "The review will be assigned to a NEW collection of reviews". So new collection means the collection "program" needs to be created first.
upvoted 6 times
...
...
FK2974
Highly Voted 3 years, 10 months ago
correct ! Program/Control/Owner
upvoted 16 times
...
bob_sez
Most Recent 1 year, 1 month ago
I just took my exam on 25th Nov 2023 and I wasnt aware that this is an open book exam. I am not sure if this comment will be approved, but you can open Learn.microsoft.com during the exam and do your research for any question.
upvoted 6 times
MPB
7 months, 4 weeks ago
https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870 That's Hilarious guys)))
upvoted 1 times
...
dc864d4
8 months ago
Open book not in the traditional sense. It's timed, proctored and the only resource is Microsoft Learn.....but that does help. Right now the test would be pretty difficult to pass without a resource as they are in process of making major changes.
upvoted 1 times
...
UjunwaRejoice
1 year ago
RAEALLY?, YOU WONT BE PENALISED FOR IT?
upvoted 2 times
...
yonie
1 year ago
You just blew my mind
upvoted 1 times
...
...
ArchitectX
1 year, 4 months ago
right answer
upvoted 2 times
...
Andre369
1 year, 8 months ago
To configure an access review assigned to a new collection of reviews and reviewed by resource owners, you should perform the following three actions in sequence: Create an access review program Set Reviewers to selected users Set Reviewers to Group owners These actions ensure that an access review program is created, reviewers are specified as selected users, and the reviewers are set to the owners of the relevant groups.
upvoted 1 times
xRiot007
6 months, 1 week ago
Inside a program you need a Control.
upvoted 1 times
...
...
majstor86
1 year, 10 months ago
1. Create program 2. Create control 3. Set reviewers to Group owners
upvoted 4 times
...
ltjones12
2 years ago
Really disappointed with how nobody in exam topics seems to be cleaning up or upgrading their deprecated questions
upvoted 9 times
...
mung
2 years, 1 month ago
Damn why there are so many deprecated question on AZ-500? Az-104 was fine..
upvoted 2 times
D3D1997
1 year, 11 months ago
coz AZ-500 had never its number changed; AZ-104 is newer, AZ-305 is the sequel to AZ-300/301 (2018/2019) AZ-303/304 (2020/2021)... so should be a AZ-503 by now...
upvoted 3 times
...
...
JohnBentass
2 years, 2 months ago
The answer is correct
upvoted 1 times
...
OpsecDude
2 years, 3 months ago
Hey guys. I just created an access review and all I did was: 1_Create the Access review from Identity Governance (no longer on "Access Review" plus no onboarding needed) 2_ Set reviewers. Then off course I set up what happens with reviewees if reviewers don't respond, durations, etc, but no access review control
upvoted 4 times
...
Patchfox
3 years ago
Is this question up to date? I can't find any documentation about programs. The added links forword me to the documentation of access review, not programs. I saw in the Identity Governance the Program section. Is this still a recommended feature or near to the end of life?
upvoted 2 times
Joshing
2 years, 11 months ago
I believe this is deprecated. I found a link to the Microsoft Graph API beta where it shows the Access Review Program and it's under the deprecated section. With the new api for Access Reviews as showing V2 in the url. https://docs.microsoft.com/en-us/graph/api/resources/program?view=graph-rest-beta
upvoted 5 times
Joshing
2 years, 11 months ago
I was wrong this completely exists... If anyone else is looking for the location of this, it is found here - https://portal.azure.com/#blade/Microsoft_AAD_ERM/DashboardBlade/Programs There is basically no documentation on it but it is similar to Catalogs for access packages. Just a logical container for storing access reviews.
upvoted 2 times
Joshing
2 years, 11 months ago
My brain is like mush from studying this exam. Apologies.
upvoted 5 times
...
...
...
...
rohitmedi
3 years, 1 month ago
correct answer
upvoted 2 times
...
justinp
3 years, 6 months ago
this question is present in test today
upvoted 4 times
...
milind8451
3 years, 11 months ago
Right ans.
upvoted 1 times
...
sureshatt
3 years, 11 months ago
With the new UI (2021.02.12) it is very hard to answer this question since the terms are not 100% aligning with the terms in the new UI. But still the answer provided here is correct. 1. Since the question talks about creating a collection of access reviews, we first need to create an access review programme. 2. Then we have to create an access review (here I have to assume 'access review control' = 'access review'). 3. Question says the "resource owners" should perform the review. Here the owners can be Group owner role. Therefore assignment should be to group owners. (I honestly thinks that the word "resource" was used just to confuse us)
upvoted 8 times
sureshatt
3 years, 9 months ago
as of today, 2021.03.28, access review programs and access review controls do not exists. Only access reviews exists.
upvoted 6 times
WMG
2 years, 9 months ago
Wrong. Programs exists under Home>Identity Governance>Programs. We use this regularly.
upvoted 1 times
...
...
micofucho
3 years, 6 months ago
What if the review is for Applications??, the questions says anything about if the review is on Teams and Groups or Applications. Then, who is the owner?? The question is rubbish, like a lot of questions in the exam: ambiguous, mal formed and with thousands of interpretations. It's not a problem of trying to confuse, it's a problem of a stupid person formulating the questions for the exam.
upvoted 1 times
...
...
PaulRSE
4 years ago
Answer is correct, Create program Create control Set reviewers to Group owners https://developer.microsoft.com/en-us/graph/blogs/retrieving-azure-ad-access-reviews/#:~:text=program%3A%20represents%20an%20Azure%20AD%20access%20review%20program.,AD%20access%20reviews%20has%20one%20program%2C%20%60Default%20program%60.
upvoted 2 times
...
sayak17
4 years ago
the second url in explanation is redirecting to the first one itself. here's another link https://www.rebeladmin.com/2019/03/step-step-guide-azure-ad-access-reviews-applications/
upvoted 1 times
sayak17
4 years ago
Is access review control still a thing or is it obsolete now?
upvoted 1 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago