Entitlement Management and Access Reviews Flashcards
6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Entitlement Management and Access Reviews flashcards as text
In Entitlement Management, what happens when a connected organization user is no longer a member of the connected organization?
Answer: Their assignments can be automatically removed based on the policy's expiration settings
Entitlement Management's time-bound assignment policies ensure that access expires regardless of the user's organizational status, and expired assignments remove access automatically.
Which access review scope setting allows you to review only guest users' membership in a group rather than all members?
Answer: Guest users only
Setting the review scope to 'Guest users only' restricts the review to external B2B guest accounts, allowing focused recertification of external collaboration access.
An organization wants to automatically create a guest account in Azure AD when an external user requests an access package for the first time. Which Entitlement Management setting enables this?
Answer: For external users, automatically create an account in this directory
Enabling automatic guest account creation in the access package policy allows Entitlement Management to provision a B2B guest account for external requestors who do not yet have a presence in the tenant.
Which feature in Access Reviews allows a reviewer to look at a decision made by another reviewer and override it during the review period?
Answer: Multi-stage reviews
Multi-stage reviews in access reviews allow sequential reviewers to see prior decisions and override them in later stages, supporting a tiered review workflow.
A delegated catalog creator role is assigned to a department manager. What can this manager do in Entitlement Management?
Answer: Create new catalogs and become the owner of those catalogs
The Catalog creator role allows users to create new catalogs in Entitlement Management and automatically become the owner of those catalogs, enabling self-service governance delegation.
What is the purpose of the 'Separation of duties' feature in Azure AD Entitlement Management?
Answer: It blocks users from requesting an access package if they already hold a conflicting access package
Separation of duties in Entitlement Management prevents users from holding incompatible access packages simultaneously by blocking requests for packages that conflict with existing assignments.