SC-300 · Question #124
Your organization is working with a new consulting firm to help with the design, development, and deployment of a new IT service. The consultants will be joining your organization at various points…
The correct answer is D. Azure AD Entitlement Management. Azure AD Entitlement Management is the right tool here because it allows administrators to create access packages - bundles of resources, roles, and permissions - that external users (like consultants) can self-request through a portal without needing to know who to contact or…
Question
Your organization is working with a new consulting firm to help with the design, development, and deployment of a new IT service. The consultants will be joining your organization at various points throughout the project and will not know what permissions they need or who to request the access from. As the Cloud Administrator, what can you implement to ensure consultants can easily request and get all of the access they need to do their job?
Options
- AAzure Arm Templates
- BAzure Blueprints
- CAzure Policies
- DAzure AD Entitlement Management
How the community answered
(18 responses)- B6% (1)
- C11% (2)
- D83% (15)
Explanation
Azure AD Entitlement Management is the right tool here because it allows administrators to create access packages - bundles of resources, roles, and permissions - that external users (like consultants) can self-request through a portal without needing to know who to contact or what specific permissions they need. It handles the entire lifecycle of access, including approvals, time-limited access, and automatic removal when no longer needed, making it ideal for managing temporary external collaborators.
Why the distractors are wrong:
- Azure ARM Templates (A) are infrastructure-as-code tools used to deploy Azure resources consistently, not to manage user access requests.
- Azure Blueprints (B) are used to define repeatable sets of Azure resources and policies for environment governance, not for managing user permissions or access requests.
- Azure Policies (C) enforce compliance rules and governance standards across resources (e.g., "only allow certain VM sizes"), but they don't manage who gets access to what or provide a self-service request mechanism.
Memory Tip: Think of Entitlement Management as an "access catalog store" - just like shopping online, consultants can browse available access packages, add what they need to their cart, and check out (request access) without needing to call anyone. If you see keywords like external users, self-service, or access requests, think Entitlement Management.
Topics
Community Discussion
No community discussion yet for this question.