SC-300 Privileged Identity Management (PIM) 2

Question 1

What type of PIM review is used to periodically validate that users still need their privileged role assignments?

Accepted Answer

Access review

Answer

Access reviews in PIM allow administrators to schedule recurring reviews where role members or their managers attest to the continued need for privileged access.

Question 2

A user with an eligible Global Administrator role wants to activate it. They are not prompted for MFA during activation. What is the most likely cause?

Accepted Answer

The 'Require Azure MFA on activation' setting is disabled for the role

Answer

If 'Require Azure MFA on activation' is disabled in the PIM role settings for Global Administrator, users will not be challenged for MFA when activating the role.

Question 3

Which PIM feature proactively detects configuration issues such as roles that have too many permanent active assignments and recommends remediation?

Accepted Answer

PIM alerts

Answer

PIM alerts automatically detect security issues like excessive permanent assignments or stale eligible assignments and provide remediation guidance in the Azure portal.

Question 4

An administrator needs to extend a user's expiring eligible role assignment without having the user re-activate. Which PIM action should the administrator take?

Accepted Answer

Update the existing assignment's end date using the 'Extend' option

Answer

PIM provides an 'Extend' option on expiring assignments that allows administrators to push out the expiration date without interrupting the user's eligibility.

Question 5

In PIM for Azure resources, which assignment type makes a user a permanent owner of a resource without any activation required?

Accepted Answer

Active assignment

Answer

An active assignment in PIM for Azure resources grants the role permanently and immediately without requiring the user to activate or go through an approval workflow.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Privileged Identity Management (PIM) 2