SC-300 Question #352: Real Exam Question with Answer & Explanation

Question

Hotspot Question You have a Microsoft 365 E5 subscription that contains a Microsoft Teams team named Team1 and two Microsoft 365 groups named Group1 and Group2. The subscription contains the users shown in the following table. You create an access package that has the following settings: Name: Package1 Resource roles: o Team1: Owner Users who can request access: For users in your directory o Specific Users and Groups: Group1 Require approval: Yes o Require requestor justification: No o How many stages: 1 o First Approver: Team1, User3 o Require approver justification: Yes Enable new requests: Yes Expiration: o Access package assignments expire: 7 days o Users can request specific timeline: Yes For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Options

• __typehotspot
• variantyes_no

Explanation

This hotspot question tests understanding of Microsoft Entra ID Governance Access Packages, specifically who can request access, who can approve, and how expiration/timeline settings work within a defined access package configuration.

Approach. To answer each statement correctly, apply the following rules: (1) Only members of Group1 can REQUEST Package1, since 'Specific Users and Groups: Group1' is the defined requestor scope - users outside Group1 (e.g., Group2 members not in Group1) cannot request it. (2) The approver is set to 'Team1, User3' meaning User3 (as a member of Team1 with Owner role or as an explicitly named approver) can approve requests; approver justification is required so approvers MUST provide justification. (3) The expiration is set to 7 days and 'Users can request specific timeline: Yes' means users CAN request a shorter duration but cannot exceed 7 days - they cannot request a timeline longer than the package maximum. (4) User3 is listed as a First Approver, so User3 can approve requests. Members of Group1 who are also in Team1 as Owners may have the Owner role assigned upon approval. These rules govern all Yes/No determinations for each statement.

Concept tested. Microsoft Entra ID Governance (Azure AD Entitlement Management) - Access Package configuration including requestor eligibility (specific groups), approval workflow (designated approvers, justification requirements), resource role assignments (Teams Owner), and expiration/timeline policies (maximum duration vs. user-selectable timeline).

Reference. https://learn.microsoft.com/en-us/entra/id-governance/entitlement-management-access-package-create

No community discussion yet for this question.