nerdexam
Microsoft

SC-300 · Question #350

Hotspot Question You have an Azure subscription named Sub1. You plan to use Microsoft Entra Permissions Management to manage Sub1. You need to ensure that Permissions Management can perform the follow

Sign in or unlock SC-300 to reveal the answer and full explanation for question #350. The question stem and answer options stay visible for context.

Submitted by yuriko_h· Mar 6, 2026Plan and implement workload identities

Question

Hotspot Question You have an Azure subscription named Sub1. You plan to use Microsoft Entra Permissions Management to manage Sub1. You need to ensure that Permissions Management can perform the following tasks:

  • Identify unused permissions assigned to applications and managed

identities.

  • Provide users with recommendations about which permissions to remove.
  • Remove unused permissions.

The solution must follow the principle of least privilege. Which role should you assign to the service principal of Permissions Management, and what should you use to provide recommendations and remove unused permissions? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:

Answer Area

  • Role
    Access Review Operator Service RoleOwnerReaderUser Access Administrator
  • Use
    A custom reportA role templateAn audit queryAn Autopilot rule

Unlock SC-300 to see the answer

You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.

Topics

#Entra Permissions Management#service principal#Autopilot rules#least privilege
Full SC-300 Practice