Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Privileged Identity Management (PIM) Flashcards

6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 6 Privileged Identity Management (PIM) flashcards as text

  1. What type of PIM review is used to periodically validate that users still need their privileged role assignments?

    Answer: Access review

    Access reviews in PIM allow administrators to schedule recurring reviews where role members or their managers attest to the continued need for privileged access.

  2. A user with an eligible Global Administrator role wants to activate it. They are not prompted for MFA during activation. What is the most likely cause?

    Answer: The 'Require Azure MFA on activation' setting is disabled for the role

    If 'Require Azure MFA on activation' is disabled in the PIM role settings for Global Administrator, users will not be challenged for MFA when activating the role.

  3. Which PIM feature proactively detects configuration issues such as roles that have too many permanent active assignments and recommends remediation?

    Answer: PIM alerts

    PIM alerts automatically detect security issues like excessive permanent assignments or stale eligible assignments and provide remediation guidance in the Azure portal.

  4. An administrator needs to extend a user's expiring eligible role assignment without having the user re-activate. Which PIM action should the administrator take?

    Answer: Update the existing assignment's end date using the 'Extend' option

    PIM provides an 'Extend' option on expiring assignments that allows administrators to push out the expiration date without interrupting the user's eligibility.

  5. In PIM for Azure resources, which assignment type makes a user a permanent owner of a resource without any activation required?

    Answer: Active assignment

    An active assignment in PIM for Azure resources grants the role permanently and immediately without requiring the user to activate or go through an approval workflow.

  6. What minimum Azure AD license is required to use Privileged Identity Management?

    Answer: Azure AD Premium P2

    PIM is an Azure AD Premium P2 feature; users who use or benefit from PIM must be licensed with Azure AD Premium P2 or EMS E5.