Plan and Implement Entitlement Management in Microsoft Entra SC-300 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What can be configured in an access package to control how long a user has access?

   • AAn expiration policy
   • BA network security group rule
   • CA conditional access session control
   • DA password reset policy
   Reveal Solution Discussion Select an answer first
2. 22application · medium

   An organization wants to ensure that all users requesting access to a sensitive HR application must agree to a data handling policy before they receive access. The policy document is updated quarterly, and users must agree to the latest version each time they request access. What should you configure in the access package?

   • AAdd a custom extension that sends the policy document to users via email before access is granted.
   • BCreate a new access package each quarter with the updated policy and require users to re-request access.
   • CUse the access package's approval policy to require the HR manager to confirm that the user read the policy.
   • DAdd a terms of use policy to the access package and require users to accept it before access is granted.
   Reveal Solution Discussion Select an answer first
4. 23application · medium

   An organization has a terms of use policy that was updated to reflect new data privacy regulations. Existing users who previously accepted the old version are still accessing the resource. The organization wants to ensure that all users accept the new version before their next access request. What should you do?

   • ARevoke all existing assignments and require users to re-request access.
   • BCreate a new terms of use and attach it to the access package, then delete the old one.
   • CSend an email to all users asking them to review the new terms of use.
   • DUpdate the terms of use in the access package and set the 'Require re-acceptance' option.
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   Which of the following is a reason to manage connected organizations carefully?

   • ATo prevent unauthorized external users from gaining access
   • BTo increase the number of external users
   • CTo reduce the need for access reviews
   • DTo eliminate the need for terms of use
   Reveal Solution Discussion Select an answer first
6. 25expert · hard

   A company has an access package for external users from a partner. The access package has an expiration of 30 days. The partner's users are frequently re-requesting access, and the company wants to reduce the administrative overhead of managing these requests. However, the company also wants to ensure that access is not granted indefinitely. What should you configure?

   • ASet the access package to allow users to extend their own access, with a maximum extension period.
   • BCreate a new access package for each request and assign it manually.
   • CIncrease the expiration period to 90 days to reduce the frequency of requests.
   • DRemove the expiration policy entirely and rely on regular access reviews.
   Reveal Solution Discussion Select an answer first