Free Microsoft Identity SC-300 Actual Exam Questions - Question 8 Discussion
Which two actions should you perform for the role? Each correct answer presents part of the
solution. NOTE: Each correct selection is worth one point.
Makes sense, Eligible (C) is needed and expiration (D) stops stale assignments. C/D
It’s C and D for me. Making assignments eligible (C) is a must, and setting expiration on those eligible assignments (D) helps keep things from lingering too long without review.
A/E? Making assignments eligible (C) is necessary, but adding both justification and ticket info (A and E) ensures stronger activation controls. D feels less critical if we already manage activations tightly.
A and E. Setting Require justification on activation (A) adds an extra layer beyond just ticket info, making activations more accountable. Plus, ticket info (E) is a standard control measure to track requests.
A/D? Setting assignments to Eligible (not Active) is key for controlling when the role’s used, but I’m thinking if you require justification on activation (A) that adds stronger control than just ticket info. Also, expiring eligible assignments after a set time (D) ensures people don’t keep access indefinitely, which feels like a solid part of the solution too. So A and D seem like a good pair for managing and limiting the User administrator role properly.
Maybe C and E here. Making assignments Eligible (C) ensures users only get the role when they need it, which tightens control. Requiring ticket info on activation (E) adds an audit trail and forces users to justify their access each time. Setting all assignments Active (B) sounds too open, and justification on activation (A) might be overkill if ticket info is already required. D feels more like a cleanup option than a must-have step.
C, E. Setting all assignments to Eligible (C) makes sense if you want users to activate the role only when needed, which adds control. Requiring ticket information on activation (E) helps with tracking why the role is being used, so it fits security best practices. A sounds good too but feels more like an extra step rather than a must-have setting. B and D don’t really match the idea of controlled access as much as C and E do.
A and E imo