SC-300 Privileged Identity Management (PIM) 3

Question 1

Which PIM setting limits how long an eligible role activation will remain active once approved?

Accepted Answer

Maximum activation duration

Answer

The 'Maximum activation duration' role setting caps how many hours an activated eligible role stays active before it automatically deactivates.

Question 2

A Privileged Role Administrator wants to prevent any user from having a permanent eligible Global Administrator assignment. Which PIM setting enforces this?

Accepted Answer

Set assignment expiration for eligible assignments

Answer

Setting an expiration duration for eligible assignments in PIM role settings prevents users from holding the eligible assignment indefinitely, requiring periodic renewal.

Question 3

When performing a PIM access review, what happens to role members who have not responded by the review end date if 'Auto apply results' is enabled and the default outcome is 'Remove access'?

Accepted Answer

Their role assignment is automatically removed

Answer

With 'Auto apply results' enabled and a default outcome of 'Remove access,' PIM automatically removes the role assignment for any reviewer who did not complete their review by the deadline.

Question 4

Which report in PIM shows a complete history of all role activations, deactivations, and assignment changes for auditing purposes?

Accepted Answer

PIM audit history

Answer

The PIM audit history report provides a detailed log of all PIM operations including activations, deactivations, approvals, and assignment changes.

Question 5

A security team wants to require that users provide a support ticket number when activating the Security Administrator role. Which PIM setting enables this?

Accepted Answer

Require ticket information on activation

Answer

The 'Require ticket information on activation' PIM role setting adds a field where users must enter a ticket number, linking activations to change management records.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Privileged Identity Management (PIM) 3