nerdexam
Microsoft

SC-300 · Question #167

You have a Microsoft 365 E5 subscription that contains a web app named App1. Guest users are regularly granted access to App1. You need to ensure that the guest users that have NOT accessed App1…

The correct answer is D. an access review for application access. Access to groups and applications for employees and guests changes over time. To reduce the risk associated with stale access assignments, administrators can use Azure Active Directory (Azure AD) to create access reviews for group members or application access…

Submitted by ashley.k· Mar 6, 2026Plan and implement identity governance

Question

You have a Microsoft 365 E5 subscription that contains a web app named App1. Guest users are regularly granted access to App1. You need to ensure that the guest users that have NOT accessed App1 during the past 30 days have their access removed. The solution must minimize administrative effort. What should you configure?

Options

  • Aa Conditional Access policy
  • Ba compliance policy
  • Ca guest access review
  • Dan access review for application access

How the community answered

(44 responses)
  • A
    9% (4)
  • B
    2% (1)
  • C
    16% (7)
  • D
    73% (32)

Explanation

Access to groups and applications for employees and guests changes over time. To reduce the risk associated with stale access assignments, administrators can use Azure Active Directory (Azure AD) to create access reviews for group members or application access. https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review

Topics

#access reviews#guest users#application access#lifecycle management

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice