SC-300 Privileged Identity Management (PIM) 3

Question 1

Which PIM setting limits how long an eligible role activation will remain active once approved?

Accepted Answer

Maximum activation duration

Answer

Assignment duration

Answer

Permanent eligible assignment

Answer

Role expiration policy

Question 2

A Privileged Role Administrator wants to prevent any user from having a permanent eligible Global Administrator assignment. Which PIM setting enforces this?

Accepted Answer

Set assignment expiration for eligible assignments

Answer

Disable permanent eligible assignments

Answer

Require approval to activate

Answer

Require MFA on activation

Question 3

When performing a PIM access review, what happens to role members who have not responded by the review end date if 'Auto apply results' is enabled and the default outcome is 'Remove access'?

Accepted Answer

Their role assignment is automatically removed

Answer

Their access is extended for another review cycle

Answer

They receive an additional 30-day grace period

Answer

An approval request is sent to their manager

Question 4

Which report in PIM shows a complete history of all role activations, deactivations, and assignment changes for auditing purposes?

Accepted Answer

PIM audit history

Answer

Azure AD Sign-in logs

Answer

Azure AD Audit logs > Directory

Answer

Microsoft Sentinel incidents

Question 5

A security team wants to require that users provide a support ticket number when activating the Security Administrator role. Which PIM setting enables this?

Accepted Answer

Require ticket information on activation

Answer

Require justification on activation

Answer

Require approval to activate

Answer

Require Azure MFA on activation

Question 6

Which PIM feature allows a group of users to gain privileged access simultaneously when a group is assigned an eligible role, rather than assigning the role to each individual?

Accepted Answer

PIM for Groups

Answer

Delegated role assignment

Answer

Access packages

Answer

Dynamic group membership