SC-300 Privileged Identity Management (PIM) 2

Question 1

What type of PIM review is used to periodically validate that users still need their privileged role assignments?

Accepted Answer

Access review

Answer

PIM alert review

Answer

Conditional Access audit

Answer

Entitlement management review

Question 2

A user with an eligible Global Administrator role wants to activate it. They are not prompted for MFA during activation. What is the most likely cause?

Accepted Answer

The 'Require Azure MFA on activation' setting is disabled for the role

Answer

MFA is not configured in the tenant

Answer

The user already has an active session with MFA

Answer

PIM does not support MFA requirements

Question 3

Which PIM feature proactively detects configuration issues such as roles that have too many permanent active assignments and recommends remediation?

Accepted Answer

PIM alerts

Answer

Access reviews

Answer

Identity Secure Score

Answer

Entitlement management

Question 4

An administrator needs to extend a user's expiring eligible role assignment without having the user re-activate. Which PIM action should the administrator take?

Accepted Answer

Update the existing assignment's end date using the 'Extend' option

Answer

Create a new eligible assignment with a new end date

Answer

Convert the eligible assignment to an active assignment

Answer

Delete and recreate the assignment

Question 5

In PIM for Azure resources, which assignment type makes a user a permanent owner of a resource without any activation required?

Accepted Answer

Active assignment

Answer

Eligible assignment

Answer

Time-bound eligible assignment

Answer

Just-in-time assignment

Question 6

What minimum Azure AD license is required to use Privileged Identity Management?

Accepted Answer

Azure AD Premium P2

Answer

Azure AD Free

Answer

Azure AD Premium P1

Answer

Microsoft 365 E3