You need to implement the planned changes and technical requirements for the marketing department.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-organization

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 tenant.
You configure a conditional access policy as shown in the Conditional Access policy exhibit. (Click the Conditional Access policy tab.)

You view the User administrator role settings as shown in the Role setting details exhibit. (Click the Role setting details tab.)

You view the User administrator role assignments as shown in the Role assignments exhibit. (Click the Role assignments lab.)

For each of the following statement, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
Statement
Answer
1. Before Admin1 can perform a task that requires the User Administrator role, an approver must approve the activation request.
Yes
2. Admin2 can request activation of the User Administrator role for a period of two hours.
No
3. If Admin3 connects to the Azure Active Directory admin center, and then activates the User Administrator role, Admin3 will be prompted to authenticate by using multi-factor authentication (MFA) twice.
Based on Microsoft's SC-300 Identity and Access Administrator Study Guide , Microsoft Learn module
"Manage Azure AD roles by using Privileged Identity Management (PIM)" , and Exam Ref SC-300 , the following logic applies:
* Approval requirement (Admin1) - In the Role setting details image, Require approval to activate is set to Yes, and one approver is listed. This means before any user (e.g., Admin1) can activate the User Administrator role, approval must be granted. Therefore, Admin1 must have the activation request approved before performing any User Administrator tasks. # (Yes)
* Activation duration (Admin2) - The configuration shows Activation maximum duration (hours): 8 hours . This defines the maximum allowed time a user can remain active after role activation. Admin2 can activate for up to 8 hours, not 2 hours unless specifically limited during activation. Hence, the statement claiming Admin2 can activate for "two hours" is incorrect. # (No)
* MFA enforcement (Admin3) - Two relevant controls exist:
* Conditional Access policy requiring MFA for all users.
* PIM role setting On activation, require Azure MFA = Yes.
According to Microsoft documentation, when both Conditional Access and PIM MFA enforcement apply, Azure AD intelligently avoids redundant prompts by honoring a single valid MFA session token. This means Admin3 would only be prompted once for MFA, even though both mechanisms require it. # (No) Therefore, as verified by official Microsoft materials and SC-300 documentation:

Comment: *

Name: *

Email: *

Verification: *

You need to implement the planned changes and technical requirements for the marketing department.
What should you do? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:

Reference:
https://docs.microsoft.com/en-us/azure/active-directory/governance/entitlement-management-organization

Comment: *

Name: *

Email: *

Verification: *

You have a Microsoft 365 subscription that contains the following:
* An Azure Active Directory (Azure AD) tenant that has an Azure Active Directory Premium P2 license
* A Microsoft SharePoint Online site named Site1
* A Microsoft Teams team named Team1
You need to create an entitlement management workflow to manage Site1 and Team1.
What should you do first?

• A.Configure an app registration.
• B.Create an Administrative unit.
• C.Create an access package.
• D.Create a catalog.

Comment: *

Name: *

Email: *

Verification: *

You have an Azure AD tenant named contoso.com that contains a group named All Company and has the following Identity Governance settings:
* Block external users from signing in to this directory: Yes
* Remove external user Yes
* Number of days before removing external user from this directory: 30
On March 1, 2022, you create an access package named Package1 that has the following settings:
* Resource roles
o Name: All Company
o Type: Group and Team
o Role: Member
* Lifecycle
o Access package assignment expire: On date
o Assignment expiration date: April 1, 2022
On March 1, 2022, you assign Package1 to the guest users shown in the following table.

On March 2, 2022, you assign the Reports reader role to Guest1.
On April 1(2022, you invite a guest user named Guest3 to contoso.com.
On April 4, 2022, you add Guest3 to the All Company group.
For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.

Correct Answer:

Explanation:
A screenshot of a computer Description automatically generated

Comment: *

Name: *

Email: *

Verification: *