Free Microsoft Identity SC-300 Actual Exam Questions - Question 15 Discussion
HOTSPOT You have an Azure AD tenant named contoso.com that contains a group named All Company and has the following Identity Governance settings: • Block external users from signing in to this directory: Yes • Remove external user Yes • Number of days before removing external user from this directory: 30 On March 1, 2022, you create an access package named Package1 that has the following settings: • Resource roles o Name: All Company o Type: Group and Team o Role: Member • Lifecycle o Access package assignment expire: On date o Assignment expiration date: April 1, 2022 On March 1, 2022, you assign Package1 to the guest users shown in the following table. 
On March 2, 2022, you assign the Reports reader role to Guest1. On April 1(2022, you invite a guest user named Guest3 to contoso.com. On April 4, 2022, you add Guest3 to the All Company group. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. 
The “Block external users from signing in” setting being Yes means no external user can sign in, so Guest3 added on April 4 can’t actually sign in after that date. Since removal is set to Yes with a 30-day countdown, Guest3 would be removed around May 4. Also, Guest1 and Guest2’s expiration on April 1 means their access package assignments end then, but the removal clock depends on when their access effectively ends, so the timeline matches the policy. This setup clearly enforces lifecycle for guests added both before and after the block setting.
Guest3’s removal countdown should start from when they’re added to the group, April 4, so yes fits the policy timeline. The 30-day removal is consistent with the tenant’s external user block settings.
Guest3 gets removed 30 days after April 4 due to the external user block.
Since the block on external users is Yes, any guest added after April 1 might not have full access. Also, the removal timer starts from when they're added, so Guest3’s membership on April 4 means their removal countdown starts then.
Is there info on when Guest1 and Guest2 were originally added as guests? Also, what’s the status or role of Guest3 after being added to the group post-April 1? Missing some dates/details here.