Drag and Drop Question You have an Azure subscription that contains the resources shown in the following table. The subscription uses Privileged Identity Management (PIM). You need to configure the fo

Sign in or unlock SC-300 to reveal the answer and full explanation for question #291. The question stem and answer options stay visible for context.

Submitted by zhang_li· Mar 6, 2026Manage Identity and Access – Configure Azure Key Vault RBAC and access policies, and implement Privileged Identity Management (PIM) for just-in-time access

Question

Drag and Drop Question You have an Azure subscription that contains the resources shown in the following table. The subscription uses Privileged Identity Management (PIM). You need to configure the following access controls by using PIM:

Ensure that User1 can read and update Secret1.
Ensure that User2 can read the contents of the secrets stored in

Vault2. The solution must follow the principle of least privilege. Which authorization method should you use for each user? To answer, drag the appropriate authorization methods to the correct users. Each authorization method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

Answer Area

Drag items

The GET Secret Permissions Access Policy permissionThe Key Vault Secrets Officer RBAC roleThe Key Vault Reader RBAC roleThe Key Vault Secrets User RBAC roleThe LIST Secret Permissions Access Policy permissionThe SET Secret Permissions Access Policy permission

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Unlock SC-300 - $49.99 / 30 days Sign in

Topics

#Azure Key Vault#Privileged Identity Management#RBAC#Least Privilege

Full SC-300 Practice