AZ-500 Question #512: Real Exam Question with Answer & Explanation

Submitted by marco_it· Mar 6, 2026Implement and manage Microsoft Entra identity and access - specifically managing authentication methods policies and understanding administrative role boundaries within Microsoft Entra ID (SC-300 / AZ-104)

Question

Hotspot Question You have a Microsoft Entra tenant that contains the users shown in the following table. You configure the Temporary Access Pass settings as shown in the following exhibit. You add the Temporary Access Pass authentication method to Admin2. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Explanation

Admin1 (a Global Administrator) can view the Temporary Access Pass of Admin2 because Global Administrators have visibility into authentication methods of other users, including other admins, making Statement 1 'Yes'. Admin2, as an Authentication Administrator, can create Temporary Access Passes for regular users (User1) but cannot manage authentication methods for privileged admin roles like Global Administrator (Admin1), because Authentication Administrators are restricted from modifying accounts with higher or equal privilege levels - making Statement 2 'Yes' and Statement 3 'No'. This follows Microsoft Entra's role hierarchy where Authentication Administrators can manage non-admin users and users with non-privileged roles, but not Global Administrators or other privileged role holders.

Topics

#Microsoft Entra ID#Temporary Access Pass#Authentication Methods#Role-Based Access Control (RBAC)

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice Browse All AZ-500 Questions