Exam SC-300 topic 4 question 86 discussion

Actual exam question from Microsoft's SC-300

Question #: 86
Topic #: 4

HOTSPOT
-

You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table.

Group2 is a member of Group1.

You configure an access review that has the following settings:

• Name: Review1
• Select what to review: Teams + Groups
• Review scope: Select Teams + groups
• Group: Group1
• Scope: Guest users only
• Select reviewers: Group owners(s)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by anonymousarpanch at Jan. 23, 2025, 5:55 p.m.

Comments

Submit Cancel

Oskarma

2 months, 2 weeks ago

I thing N,N,N. 1. User1 is member, not guest 2. User4 is member too... 3. Access reviews focus in direct group membership, not nested.

upvoted 1 times

rvln7

1 month, 3 weeks ago

3.-Y i think Reviewing a role with nested groups assigned: For users who have membership through a nested group, the access review doesn't remove their membership to the nested group and therefore they retain access to the role being reviewed. https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-perform-roles-and-resource-roles-review so what i think is that we basically can do an access review, but we can NOT automatically remove access based on the access review for members of nested groups....not sure :D

upvoted 1 times

...

rvln7

1 month, 3 weeks ago

yeah, here is more info: "In a group review, nested groups will be automatically flattened, so users from nested groups will appear as individual users. If a user is flagged for removal due to their membership in a nested group, they will not be automatically removed from the nested group, but only from direct group membership" https://learn.microsoft.com/en-us/entra/id-governance/create-access-review

upvoted 1 times

...

anonymousarpanch

3 months ago

all 3 could have been 'Yes'. its only because the scope is for 'Guest users' which is why only item 3 'User5' is yes.

upvoted 1 times

Sunth65

2 months, 3 weeks ago

NB! User4 is the Owner for Group 2. Scope: Guest users only. Reviewers are group owners !! N,N,N

upvoted 1 times

Sunth65

2 months, 2 weeks ago

User3 have review rights only for User2 !(Group1 owner)

upvoted 1 times

...

Exam SC-300 All Questions

View all questions & answers for the SC-300 exam

Exam SC-300 topic 4 question 86 discussion

Comments

Oskarma

rvln7

rvln7

anonymousarpanch

Sunth65

Sunth65

SY0-701