ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam SC-300 All Questions

View all questions & answers for the SC-300 exam
Go to Exam

Exam SC-300 topic 4 question 44 discussion

Actual exam question from Microsoft's SC-300
Question #: 44
Topic #: 4
[All SC-300 Questions]

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains three users named User1, User2, and User3.

You have two Azure AD roles that have the Activation settings shown in the following table.



The Azure AD roles have the Assignment settings shown in the following table.



The Azure AD roles have the eligible users shown in the following table.



For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:
by KrissB at Aug. 14, 2023, 9:43 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
northgaterebel
Highly Voted 1 year, 7 months ago
N - Approvers cannot approve their own role activation requests (Topic 4 Question 34) N - User1 is not an approver for Role2 N - Justification is not required for Role1
upvoted 21 times
northgaterebel
1 year, 6 months ago
N, N, Y. changed my mind. Require justification on active assignment is Yes for Role 1. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment
upvoted 16 times
Alcpt
10 months ago
NO! The approver (U1) does not have to provide the justification. The user (u2) requesting access has to provide justification.
upvoted 4 times
...
Logitech
1 year, 5 months ago
1. NO - just, tested it. You cannot approve your own request, it is not even visable under "approve requests" 2. No of course. 3.Yes - can not approve without justificaiton
upvoted 10 times
Alcpt
10 months ago
read the question dude, its not asking whether justification is required. its asking whether the approver (u1) needs to do the justification. u1 does NOT do the justification, it must be u2. its scary how many learners here have not actually deployed and configured PIM to understand the components but make guesses.
upvoted 5 times
...
...
[Removed]
12 months ago
User 2 doesn't have Role 1 yet, so the assignment is eligible and not active, so it should be No...like you said the first time :)
upvoted 3 times
...
Load full discussion...
...
...
SumitSahoo
Highly Voted 1 year, 5 months ago
1. No - User 1 is not getting the request to approve. hence the request is always in a pending state. and unless approved, the role will not be added. 2. No - User1 is not an approver for Role2 3. Yes - User 1 needs to provide a justification while approving the requests.
upvoted 11 times
Nail
4 months, 2 weeks ago
NNN. The justification comes from the user, not the approver. "Require justification on active assignment You can require that users enter a business justification when they create an active (as opposed to eligible) assignment." https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment
upvoted 2 times
...
...
YesPlease
Most Recent 2 days, 14 hours ago
1) NO, users can not approve their own requests. 2) NO, User1 is only able to approve for Role1 and not for Role2 3) YES, "Require justification on active assignment" is turned ON
upvoted 1 times
...
anonymousarpanch
1 month, 3 weeks ago
N,N,Y..the below provided link for northgaterebel is correct on point no. 1, . Point no.2 is easy. Point no. 3, you can refer https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment; or https://learn.microsoft.com/en-us/answers/questions/1636124/pim-mandatory-justification-when-approving-request
upvoted 1 times
...
khangkowng1
3 months ago
Tested in Lab environment. Question #3 is Yes. Approver is prompted for a justification to approve role activation requst.
upvoted 2 times
...
penatuna
9 months ago
Tested by me: NO Approvers are not able to approve their own role activation requests. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-approval-workflow#approve-requests NO User1 is not an approver for Role2. Also, “Require approval to activate” is set to No, so for this role User3 does not need approver. YES No matter what activation / assignment settings you use, Justification seems to be mandatory when Approving Request. https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-resource-roles-configure-role-settings#require-justification-on-active-assignment
upvoted 2 times
...
Nyamnyam
1 year, 4 months ago
NNN. Question 3 is "to approve the request of User2", who is in table 3 configured for "Eligible assignment". So when he triggers a request to activate the role for him, only "Require justification on activation" is evaluated. And it is set to "No" in table 1.
upvoted 6 times
hml_2024
6 months, 1 week ago
I also think the answers are N, N, N
upvoted 1 times
...
...
KrissB
1 year, 7 months ago
I thought you can't self approve, so why would the User 1 request for Role one be automatically approved?
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago