exam questions

Exam SC-900 All Questions

View all questions & answers for the SC-900 exam

Exam SC-900 topic 1 question 34 discussion

Actual exam question from Microsoft's SC-900
Question #: 34
Topic #: 1
[All SC-900 Questions]

Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?

  • A. access reviews
  • B. managed identities
  • C. conditional access policies
  • D. Azure AD Identity Protection
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Melwin86
Highly Voted 3 years, 5 months ago
correct https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 37 times
...
[Removed]
Highly Voted 2 years, 8 months ago
A is correct. But the description offered is not fully adequate for what access reviews do: there is no capability to AUTOMATICALLY remove user access rights. The whole point of (manual user-driven) access reviews is that in some cases automation isn't possible. (See the link already provided here: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview)
upvoted 10 times
...
LegendaryZA
Most Recent 2 months, 2 weeks ago
Selected Answer: A
The answer is: access reviews https://learn.microsoft.com/en-us/entra/id-governance/access-reviews-overview
upvoted 1 times
...
PC75
1 year, 2 months ago
Selected Answer: A
Correct.
upvoted 1 times
...
RahulX
1 year, 3 months ago
A. access reviews
upvoted 1 times
...
manofsteel9
1 year, 6 months ago
Selected Answer: A
A-Correct answer
upvoted 1 times
...
nobrainatall
1 year, 10 months ago
Selected Answer: A
as suggested by Barbados https://youtu.be/kDRjQQ22Wkk
upvoted 1 times
...
Whyiest
1 year, 11 months ago
Why there is no "dynamics groups" in the option ? I think it's an error : Dynamic groups are used to automate the management of Azure Active Directory (AAD) group membership. They allow you to define rules to automatically add or remove users from a group based on certain criteria such as their job title or department. Access reviews, on the other hand, are used to periodically review the access permissions of users to Azure resources. They allow you to identify and revoke unnecessary access, ensuring that only the right people have the right level of access to your resources. Access reviews can be done on role assignments, group memberships, and application assignments. In summary, Dynamic groups are used to automatically manage group membership in AAD, while access reviews are used to periodically review and revoke unnecessary access to Azure resources, so here it must be Dynamic Groups or maybe I'm wrong ?
upvoted 5 times
Barbados
1 year, 10 months ago
You're overthinking it. The key word in this question is "evaluate". You are given the option to set up recurring reviews and apply the decisions "automatically". Check out this video and look at the slide around the 1:30 mark. https://youtu.be/kDRjQQ22Wkk
upvoted 5 times
...
...
Lizzylizzy
2 years ago
Access review is the correct answer
upvoted 1 times
...
dd9396
2 years ago
A is correct, When the review is complete, access reviews can be set to manually or automatically remove access from the group membership or application assignment except for a dynamic group or originates from on-premises AD.
upvoted 2 times
...
InformacionFalsa
2 years ago
That would be wrong. Dynamic groups are the ones that do it AUTOMATICALLY. If that word wouldn't appear, then the right answer would be "A"
upvoted 1 times
...
mitchduck
2 years ago
Selected Answer: A
A is correct
upvoted 2 times
...
Lone__Wolf
2 years, 2 months ago
KEYWORD evaluate:review Answer is A
upvoted 3 times
...
abilioneto
2 years, 2 months ago
correct
upvoted 1 times
...
Zeus009
2 years, 3 months ago
correct
upvoted 2 times
...
cantbeme
2 years, 4 months ago
on exam today
upvoted 2 times
...
AbhiIAM
2 years, 5 months ago
In exam today
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago