Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Entitlement Management and Access Reviews Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Entitlement Management and Access Reviews flashcards as text

  1. In Azure AD Entitlement Management, what is an 'access package'?

    Answer: A collection of resources (groups, apps, SharePoint sites) that can be requested and assigned together

    An access package in Entitlement Management groups related resources into a single requestable unit, allowing users to request and receive access to multiple resources through a single workflow.

  2. Which role is required to create and manage access packages in Azure AD Entitlement Management?

    Answer: Identity Governance Administrator or catalog owner/access package manager

    The Identity Governance Administrator can manage all entitlement management settings, while catalog owners and access package managers have delegated authority within their catalogs.

  3. What is a 'catalog' in Azure AD Entitlement Management?

    Answer: A container for access packages and the resources they reference

    A catalog is a logical container that groups access packages and the resources they include, enabling delegation of access package management to specific catalog owners.

  4. An access package policy is configured with a 14-day expiration and no renewal. What happens to a user's access when the assignment expires?

    Answer: Access is automatically removed from all resources included in the access package

    When an access package assignment expires, Entitlement Management automatically removes the user from all resource groups, apps, and sites included in that access package.

  5. Which Entitlement Management feature allows users from partner organizations with a different Azure AD tenant to request access packages?

    Answer: Connected organizations

    Connected organizations in Entitlement Management represent external Azure AD tenants or domains whose users can be approved to request access packages via self-service.

  6. What is the purpose of a 'policy' within an access package in Azure AD Entitlement Management?

    Answer: It defines who can request the access package, approval workflows, and assignment lifecycle settings

    An access package policy specifies the requestor scope, approvers, approval steps, access duration, and review requirements for assignments made through that policy.