You have an Azure subscription that contains a virtual machine named VM1. VM1 has the following configurations:
- Private IP address: 172.16.1.5
- Public IP address: 108.143.161.25
- System-assigned managed identity status: On
You install an app named App1 on VM1.
You need to configure App1 to request a managed identity app-only access token.
Which IP address should App1 use for the request?

• A.108.143.161.25
• B.127.0.0.1
• C.169.254.169.254
• D.172.16.1.5

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft Entra tenant that contains the users shown in the following table.

You add the following assignment for the User Administrator role:
* Scope type: Directory
* Selected members: Group1
* Assignment type: Active
* Assignments starts August 15. 2022
* Assignment ends: December 15, 2022
You add the following assignment for the Exchange Administrator role:
* Scope type: Directory
* Selected members: Group2
* Assignment type: Eligible
* Assignments starts: October 15, 2022
* Assignment ends: January 15. 2023
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
< On November 15, 2022, Admin1 can reset the password of Admin2. = Yes
On October 15, 2022, Admin2 signs in and can administer Exchange Online. = No On September 1, 2022, Admin3 can reset the password of Admin1. = Yes
\
In SC-300 materials, Microsoft Entra Privileged Identity Management (PIM) distinguishes Active and Eligible assignments. An Active assignment "grants the role immediately until it expires," whereas an Eligible assignment "does not grant permissions until the user activates the role for a limited time." Group-based role assignment applies the role to all members of the group within the configured start/end dates. The User Administrator role is documented as being able to "manage users and groups, including reset passwords for most admin roles except highly privileged roles." Applying these rules to the scenario:
* User Administrator # Group1 (Active 8/15-12/15) : Admin1 and Admin3 are members of Group1, so both hold User Administrator actively on 9/1 and 11/15. Therefore, Admin1 can reset Admin2's password on 11/15 , and Admin3 can reset Admin1's password on 9/1 .
* Exchange Administrator # Group2 (Eligible 10/15-1/15) : Admin2 (member of Group2) is only eligible starting 10/15 ; eligibility alone does not grant Exchange admin permissions until he activates the role (which typically requires justification/MFA and sets a time-bound active window). Thus, simply signing in on 10/15 does not let Admin2 administer Exchange Online.
These behaviors are emphasized in SC-300 guidance on PIM: active assignment = immediate permissions ; eligible assignment = must activate before permissions apply ; group assignment = role applies to all group members for the assignment window .

Comment: *

Name: *

Email: *

Verification: *

You need to identify which roles to use for managing role assignments. The solution must meet the delegation requirements.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/role-based-access-control/role-assignments-portal
https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft Entra tenant that contains the users shown in the following table.

You have an administrative unit named Au1.Group1, User2, and User3are members of Au1.
User5 is assigned the User Administrator role for Au1.
For which users can User5 reset passwords?

• A.User2 and User3 only
• B.User1, User2, and User3
• C.User3 and User4 only
• D.User1 and User2 only

Comment: *

Name: *

Email: *

Verification: *

You have an Azure Active Directory (Azure AD) tenant that contains a user named User1.
An administrator deletes User1.
You need to identity the following:
* How many days after the account of User1 is deleted can you restore the account?
* Which is the least privileged role that can be used to restore User1?
What should you identify? To answer, select the appropriate options in the answer are a. NOTE: Each correct selection is worth one point.

Correct Answer:

Comment: *

Name: *

Email: *

Verification: *