SC-300 Privileged Identity Management (PIM)

Question 1

In Azure AD Privileged Identity Management, what is the difference between an 'eligible' assignment and an 'active' assignment?

Accepted Answer

Eligible users must activate their role before using it; active users have the role immediately without activation

Answer

Eligible assignments are permanent; active assignments are time-limited

Answer

Eligible assignments require approval; active assignments do not

Answer

Eligible assignments apply to groups; active assignments apply to users

Question 2

What is the default maximum activation duration for a PIM role assignment?

Accepted Answer

8 hours

Answer

1 hour

Answer

4 hours

Answer

24 hours

Question 3

Which PIM feature requires a second administrator to approve a role activation request before the role becomes active?

Accepted Answer

Require approval to activate

Answer

Activation maximum duration

Answer

Require justification on activation

Answer

Require Azure MFA on activation

Question 4

You want to ensure that all eligible Global Administrator role activations are recorded with a business justification. Which PIM role setting should you enable?

Accepted Answer

Require justification on activation

Answer

Require ticket information on activation

Answer

Require approval to activate

Answer

Require Azure MFA on activation

Question 5

In PIM, which role is required to manage role assignments for Azure AD directory roles?

Accepted Answer

Global Administrator or Privileged Role Administrator

Answer

Security Administrator

Answer

Identity Governance Administrator

Answer

User Administrator

Question 6

Which PIM capability sends email notifications to designated reviewers when an access review for a privileged role is ready for review?

Accepted Answer

Notifications in role settings

Answer

PIM alerts

Answer

Access reviews

Answer

Role settings audit log