Free Microsoft Security SC-900 Actual Exam Questions - Question 5 Discussion
HOTSPOT For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. 
Statement 3 looks like it should be Yes since some roles can be assigned at both user and tenant scope, depending on the role type. That flexibility is key here.
I think statement 1 should be No because global admin roles impact the entire directory, not just individual users. So it’s not really user scope like that.
Statement 2 says it's about user scope, so that has to be No for tenant-wide roles.
Statement 3 matches tenant-wide role scope, so Yes fits well here.
Statement 3 mentions tenant-wide roles, so it’s Yes for sure.
Statement 3 is definitely about Azure AD roles, not just group roles. Tenant-wide directory roles control access across the whole Azure AD, so if it talks about assigning roles at tenant level, that should be Yes.
Can someone clarify statement 3? The explanation feels off to me.