Privileged Identity Management (PIM) Flashcards
6 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.
Read the first 6 Privileged Identity Management (PIM) flashcards as text
Which PIM setting limits how long an eligible role activation will remain active once approved?
Answer: Maximum activation duration
The 'Maximum activation duration' role setting caps how many hours an activated eligible role stays active before it automatically deactivates.
A Privileged Role Administrator wants to prevent any user from having a permanent eligible Global Administrator assignment. Which PIM setting enforces this?
Answer: Set assignment expiration for eligible assignments
Setting an expiration duration for eligible assignments in PIM role settings prevents users from holding the eligible assignment indefinitely, requiring periodic renewal.
When performing a PIM access review, what happens to role members who have not responded by the review end date if 'Auto apply results' is enabled and the default outcome is 'Remove access'?
Answer: Their role assignment is automatically removed
With 'Auto apply results' enabled and a default outcome of 'Remove access,' PIM automatically removes the role assignment for any reviewer who did not complete their review by the deadline.
Which report in PIM shows a complete history of all role activations, deactivations, and assignment changes for auditing purposes?
Answer: PIM audit history
The PIM audit history report provides a detailed log of all PIM operations including activations, deactivations, approvals, and assignment changes.
A security team wants to require that users provide a support ticket number when activating the Security Administrator role. Which PIM setting enables this?
Answer: Require ticket information on activation
The 'Require ticket information on activation' PIM role setting adds a field where users must enter a ticket number, linking activations to change management records.
Which PIM feature allows a group of users to gain privileged access simultaneously when a group is assigned an eligible role, rather than assigning the role to each individual?
Answer: PIM for Groups
PIM for Groups allows an Azure AD group to be assigned as eligible for a role, so individual group members can activate their group membership to gain the role's privileges.