nerdexam
Microsoft

SC-300 · Question #385

Hotspot Question You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You configure an access re

The correct answer is New-AzureADApplication: DisplayName; -GroupMembershipClaims: GroupMembershipClaims. Review1 is configured to review 'Guest users only' in Group1, with 'Group owner(s)' as reviewers. User3 is the owner of Group2 (which is a member of Group1), making User3 a reviewer only for guests within Group2. User5 is a guest member of Group2, so User3 (as Group2's owner) can

Submitted by klara.se· Mar 6, 2026Manage identity and access - Implement and manage Microsoft Entra ID governance features including access reviews for groups and guest users

Question

Hotspot Question You have a Microsoft Entra tenant that contains two groups named Group1 and Group2 and the users shown in the following table. Group2 is a member of Group1. You configure an access review that has the following settings:

  • Name: Review1
  • Select what to review: Teams + Groups
  • Review scope: Select Teams + groups
  • Group: Group1
  • Scope: Guest users only
  • Select reviewers: Group owners(s)

For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

SC-300 question #385 exhibit

Answer Area

  • New-AzureADApplicationDisplayName
    DisplayNameNew-AzureADApplicationNew-AzureADApplicationExtensionPropertyNew-AzureADApplicationKeyCredential
  • -GroupMembershipClaimsGroupMembershipClaims
    GroupMembershipClaimsIdentifierUrisKeyCredentials

Explanation

Review1 is configured to review 'Guest users only' in Group1, with 'Group owner(s)' as reviewers. User3 is the owner of Group2 (which is a member of Group1), making User3 a reviewer only for guests within Group2. User5 is a guest member of Group2, so User3 (as Group2's owner) can review User5. User1 is not a guest user, so they are excluded from the review scope entirely - User3 cannot review non-guest users. User4 is a guest in Group1 but is NOT a member of Group2; since User3 only owns Group2, they have no authority to review guests who belong to Group1 directly (that would fall to Group1's owner).

Topics

#Microsoft Entra ID#Access Reviews#Identity Governance#Group Membership

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice