Entitlement Management and Access Reviews Flashcards
6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Entitlement Management and Access Reviews flashcards as text
In an Access Review configured for group members, who can be designated as reviewers?
Answer: Group owners, selected reviewers, members themselves, or managers of members
Access reviews support multiple reviewer types including the resource owner, designated individuals, the users themselves for self-review, or the user's manager.
What action does 'Apply results' perform at the end of an Access Review?
Answer: It implements the decisions made during the review by adding or removing access
When access review results are applied (manually or automatically), Azure AD acts on the reviewers' decisions by removing access for denied users or retaining it for approved users.
Which Access Review setting automatically removes access for users whose reviewers do not respond by the review deadline?
Answer: If reviewers don't respond: Remove access
Setting 'If reviewers don't respond' to 'Remove access' ensures that non-responses are treated as denials, automatically removing access from users not explicitly approved.
A company runs quarterly access reviews on all privileged directory roles. Which Azure AD feature is being used?
Answer: PIM access reviews
PIM includes built-in access review capabilities that allow periodic recertification of privileged directory role assignments to ensure least privilege is maintained.
What does the 'Recommendations' feature in Access Reviews do?
Answer: It provides reviewers with data-driven approve or deny suggestions based on user sign-in activity
The recommendations feature displays a suggested decision to reviewers based on signals such as whether the user has signed in recently, helping reviewers make informed decisions more efficiently.
Which entitlement management setting allows a user to request renewal of their access package assignment before it expires?
Answer: Allow renewal: Enabled
Enabling the renewal option in an access package policy allows users to submit a renewal request before their assignment expires, subject to the same or separate approval workflow.