Free Microsoft Identity SC-300 Actual Exam Questions - Question 11 Discussion
Question No. 11
You have an Azure subscription named Sub1 that uses Microsoft Entra Permissions Management.
Sub1 contains a user named User1. User1 is granted multiple permissions across Sub1.
You need to replace all the permissions granted to User1 with read-only permissions. The solution
must minimize administrative effort.
What should you do on the Remediation tab in Permissions Management?
Sub1 contains a user named User1. User1 is granted multiple permissions across Sub1.
You need to replace all the permissions granted to User1 with read-only permissions. The solution
must minimize administrative effort.
What should you do on the Remediation tab in Permissions Management?
Select all that apply, then reveal solution.
US
OO
Osama O.
2026-02-22
I’m not sure option A fully removes existing permissions though, it might just add a new role on top. Wouldn't the quick action in C be designed to streamline exactly this kind of bulk change? Maybe it handles the replacement automatically?
0
ET
Ethan T.
2026-01-24
Option A makes sense because creating a new role with just read-only permissions and assigning it to User1 could quickly replace all current permissions in one step. It seems less manual than managing individual requests or templates, which might take longer to apply across multiple permissions. So, option A could be a good fit if the goal is to minimize admin effort by centralizing permissions into one specific role.
0
KY
Karan Y.
2026-01-17
It’s C. Use a quick action to change User1’s permissions with minimal effort.
0