SC-300 Entitlement Management and Access Reviews

Question 1

In Azure AD Entitlement Management, what is an 'access package'?

Accepted Answer

A collection of resources (groups, apps, SharePoint sites) that can be requested and assigned together

Answer

An access package in Entitlement Management groups related resources into a single requestable unit, allowing users to request and receive access to multiple resources through a single workflow.

Question 2

Which role is required to create and manage access packages in Azure AD Entitlement Management?

Accepted Answer

Identity Governance Administrator or catalog owner/access package manager

Answer

The Identity Governance Administrator can manage all entitlement management settings, while catalog owners and access package managers have delegated authority within their catalogs.

Question 3

What is a 'catalog' in Azure AD Entitlement Management?

Accepted Answer

A container for access packages and the resources they reference

Answer

A catalog is a logical container that groups access packages and the resources they include, enabling delegation of access package management to specific catalog owners.

Question 4

An access package policy is configured with a 14-day expiration and no renewal. What happens to a user's access when the assignment expires?

Accepted Answer

Access is automatically removed from all resources included in the access package

Answer

When an access package assignment expires, Entitlement Management automatically removes the user from all resource groups, apps, and sites included in that access package.

Question 5

Which Entitlement Management feature allows users from partner organizations with a different Azure AD tenant to request access packages?

Accepted Answer

Connected organizations

Answer

Connected organizations in Entitlement Management represent external Azure AD tenants or domains whose users can be approved to request access packages via self-service.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Entitlement Management and Access Reviews