ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam MS-100 All Questions

View all questions & answers for the MS-100 exam
Go to Exam

Exam MS-100 topic 4 question 53 discussion

Actual exam question from Microsoft's MS-100
Question #: 53
Topic #: 4
[All MS-100 Questions]

HOTSPOT -
Your company has an Azure Active Directory (Azure AD) tenant named contoso.com and a Microsoft 365 subscription.
Contoso.com contains the users shown in the following table.

You add an enterprise application named App1 to contoso.com.
You configure the following self-service settings for App1:
✑ Allow users to request access to this application is set to Yes.
✑ To which group should assigned users be added is set to Group1.
✑ Who is allowed to approve access to this application is set to User2.
✑ Require approval before granting access to this application is set to Yes.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Yes.
User1 can request access to App1 because ג€Allow users to request access to this applicationג€ is set to Yes.
Box 2: No.
User2 is an approver. If User2 requests access to App1, he will still need to approve the request before he is added to Group1.
Box 3: Yes.
User2 can approve requests for App1 because ג€Who is allowed to approve access to this applicationג€ is set to User2.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/manage-self-service-access
by Sprinqfield at May 27, 2021, 9:52 p.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Sprinqfield
Highly Voted 3 years, 11 months ago
I guess, its N, N, Y. User1 already member with Group1
upvoted 11 times
michszym
3 years, 10 months ago
User1 won't see "Request Access" button if he is already in Group1?
upvoted 1 times
michszym
3 years, 9 months ago
I've made test - Answers will be: NYY Box1 - user already in Group1 can see App1 in MyApps and cannot see on list to requested App so he cannot request them once again Box2 - user2 is automatically added to Group1 when he request App1 Box3 obviously Y
upvoted 15 times
Chipper
3 years, 8 months ago
This is my thinking as well. If user2 is an approver and user2 asks for the app, wouldn't it be auto approved? Is there another approver that needs to approve these types of requests?
upvoted 1 times
Durden871
3 years, 1 month ago
✑ To which group should assigned users be added is set to Group1. ✑ Require approval before granting access to this application is set to Yes. Even though User 2 is an approver, it isn't a member of Group 1 and to join you need to accept the approval. I would say box one should be no. Why would you be able to request access to an app you already have access to?
upvoted 1 times
...
...
...
...
...
Startkabels
Most Recent 2 years, 5 months ago
Doesn't it read that assigned users are added to group 1 and not that the app is assigned to group 1? I'd say Y N Y
upvoted 3 times
Startkabels
2 years, 5 months ago
Checked in production: Enterprise apps are assigned to users unders Users/Groups. This question is referring to the setting under Self-service that allows you to add users to a selected group after their request for the app is approved.
upvoted 1 times
...
...
Steffanle
2 years, 6 months ago
https://learn.microsoft.com/en-us/azure/active-directory/governance/review-your-access
upvoted 1 times
...
joergsi
3 years, 2 months ago
The answer is YYY https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/tenant-allow-block-list?view=o365-worldwide#url-syntax-for-the-tenant-allowblock-list - Wildcards (*) are allowed in the following scenarios: A left wildcard must be followed by a period to specify a subdomain. For example, *.contoso.com is allowed; *contoso.com is not allowed. => fabrikam*.com is not allowed! - The tilde (~) character is available in the following scenarios: A left tilde implies a domain and all subdomains. For example ~contoso.com includes contoso.com and *.contoso.com. because the ~ is not been used: => contoso.com would be blocked => us.contoso.com would NOT be blocked
upvoted 1 times
alex_p
3 years ago
dude, you are commenting something different!
upvoted 12 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago