SC - 300 Day- 4

What is the primary purpose of Microsoft Entra PIM?

• To manage user licenses

• To provide just-in-time privileged access

• To monitor network traffic

• To assign MFA policies

Which of the following roles can be managed using PIM?

• Global Administrator

• Billing Administrator

• SharePoint Administrator

• All of the above

What feature does PIM offer to reduce standing access?

• Role assignment automation

• Time-bound role activation

• License management

• Password rotation

What is an access package in Microsoft Entra Entitlement Management?

• A group of licenses

• A collection of resources and policies

• A set of MFA rules

• A list of admin users

Which of the following can be included in an access package?

• Groups

• SharePoint sites

• Applications

• All of the above

What is the purpose of access reviews in Entitlement Management?

• To validate ongoing access need

• To assign roles

• To reset passwords

• To monitor login attempts

Which of the following is a key component of Identity Governance?
a)
b)
c)
d) Network segmentation

• Access reviews

• Conditional Access

• Device compliance

• Network segmentation

What does Identity Governance help organizations achieve?

• Secure email communication

• Efficient license distribution

• Compliance and least privilege access

• High availability of services

Answer explanation

Manual provisioning means there is no automatic Azure AD provisioning connector for the app yet. User accounts must be created manually, for example by adding users directly into the app's administrative portal or uploading a spreadsheet with user account detail. Consult the documentation provided by the app or contact the app developer to determine what mechanisms are available. Automatic means that an Azure AD provisioning connector has been developed for this application.

Which tool is used to automate user lifecycle management in Identity Governance?

• Microsoft Defender

• Lifecycle Workflows

• Azure Monitor

• Intune

Answer explanation

With the usage and insights report, you can get an application-centric view of your sign-in data to find information about these three topics.

You need to configure a web API to accept tokens from a client app. Which setting in Azure AD app registration enables this?

• Expose an API

• API Permissions

• Redirect URI

• Branding

Answer explanation

In Azure AD all users can register application registrations and manage all aspects of applications they create. Everyone also has the ability to consent to apps accessing company data on their behalf.