정답:

Explanation:
User
Portal to Use
User1
Azure Active Directory admin center
User2
Microsoft 365 compliance center
User3
Microsoft Endpoint Manager admin center
This question tests your knowledge of Microsoft 365 administrative roles and their associated management portals, as defined in the Microsoft Identity and Access Administrator (SC-300) Exam Study Guide and Microsoft Learn's "Manage identity and access in Microsoft Entra ID and Microsoft 365" module.
Let's analyze each user and the roles assigned:
* Roles:
* User Administrator
* Device Administrator
* Identity Governance Administrator
These are all Azure AD-based roles.
* The User Administrator role allows the management of users, groups, and password resets in Azure AD.
* The Device Administrator role applies to Azure AD joined devices.
* The Identity Governance Administrator manages Access Reviews, Entitlement Management, and Terms of Use, all of which are under Azure AD Identity Governance.
According to Microsoft documentation:
"User, Device, and Identity Governance Administrators perform their management tasks in the Azure Active Directory admin center." Portal: Azure Active Directory admin center
* Roles:
* Records Management
* Quarantine Administrator
These are Microsoft Purview compliance roles, used for managing retention policies, data lifecycle management, and quarantine of messages/files.
Both are managed through the Microsoft 365 compliance center (previously known as the Security & Compliance Center). Microsoft documentation:
"Records Management and Quarantine Administrator roles allow access to compliance features such as data retention, auditing, and message quarantine, all of which are configured from the Microsoft 365 compliance center." Portal: Microsoft 365 compliance center
* Roles:
* Endpoint Security Manager
* Intune Role Administrator
These roles are directly tied to Microsoft Endpoint Manager (Intune).
* The Endpoint Security Manager configures device compliance, security baselines, and endpoint protection.
* The Intune Role Administrator manages Intune roles and permissions.
Microsoft documentation:
"Administrators managing Intune roles and endpoint security policies use the Microsoft Endpoint Manager admin center (https://endpoint.microsoft.com)." Portal: Microsoft Endpoint Manager admin center

정답: C  🗳️

설명: (Fast2test 회원만 볼 수 있음)

정답:

Explanation:
Statement
Yes / No
If User1 requests Role1, the request will be approved automatically.
No
User1 can approve the request of User3 for Role2.
No
User1 must provide justification to approve the request of User2 for Role1.
Yes
According to the Microsoft SC-300 study guide, Exam Ref SC-300, and Microsoft Entra Privileged Identity Management (PIM) documentation, role activation and assignment settings in Azure AD PIM determine who can activate roles, who can approve activations, and whether justification is required. Let's analyze each configuration step-by-step.
Setting
Value
Required justification on activation
No
Require approval to activate
Yes
Approvers
User1
Allow permanent eligible assignment
Yes
Allow permanent active assignment
Yes
Require justification on active assignment
Yes
Eligible Assignments: User1, User2
Setting
Value
Required justification on activation
Yes
Require approval to activate
No
Approvers
None
Allow permanent eligible assignment
No
Allow permanent active assignment
Yes
Require justification on active assignment
Yes
Eligible Assignments: User3
"If User1 requests Role1, the request will be approved automatically."
* Role1 requires approval to activate.
* The approver is User1, but a user cannot self-approve their own request in Azure AD PIM.
* Therefore, even though User1 is listed as an approver, the system does not automatically approve self- requests.
# Answer: No
"User1 can approve the request of User3 for Role2."
* Role2 does not require approval to activate (approval = No).
* User3 is the only eligible member for Role2 and can activate it directly.
* Hence, no approval action exists for User1.
# Answer: No
"User1 must provide justification to approve the request of User2 for Role1."
* Role1 requires approval to activate, and User1 is the approver.
* The assignment settings for Role1 state: Require justification on active assignment = Yes.
* This means when approving or activating, the approver (User1) must enter a justification before approval.
# Answer: Yes

정답: B  🗳️

설명: (Fast2test 회원만 볼 수 있음)