Contoso, a financial services company, must regularly certify that only current employees retain access to the internal HR application. They want to review access for all users who can sign in to the application, including those who are members of nested groups. The review should be created in the Microsoft Entra admin center and must include both direct and transitive group memberships. Which scope should you select when creating the access review?

All guest users who have accessed the HR application in the last 30 days

All users who have a direct assignment to the HR application

All users who can sign in to the HR application

All users who are members of the HR application's assigned group

An access review for a group that provides access to a financial system has ended. The review was configured with auto-apply disabled. The results show that 10 users were denied access. The administrator needs to enforce the decisions, but they also need to ensure that the enforcement actions are documented for audit purposes. What should the administrator do?

Ignore the denials because the review was not configured to auto-apply

Re-enable auto-apply and wait for the system to remove the users

Manually remove the denied users from the group and record the actions in the audit log

Delete the group and recreate it without the denied users

Where can an administrator view the progress of an ongoing access review?

In the Microsoft 365 compliance center

In the Access reviews page of the Microsoft Entra admin center

In the Azure Active Directory diagnostic settings

A company's compliance team needs to provide evidence to auditors that access reviews are being conducted regularly and that decisions are being enforced. They want to maintain a record of each review's scope, decisions, and actions taken. What is the best way to document access review processes?

Rely on the memory of the security team to describe the reviews

Store all review decisions in a shared email folder

Keep a spreadsheet manually updated by the security team

Use the Microsoft Entra audit logs and export review results to a secure repository

Which criterion can be used to filter users in an access review scope?

User's device compliance status

Microsoft Certified:Identity and Access Administrator Associate

Domain 4Objective 2

Plan, Implement, and Manage Access Reviews in Microsoft Entra SC-300 Practice Questions (Page 1)

Part of the Plan and automate identity governance domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

11concepts

20–25%of the exam

Questions 1–5

1application · medium
Contoso, a financial services company, must regularly certify that only current employees retain access to the internal HR application. They want to review access for all users who can sign in to the application, including those who are members of nested groups. The review should be created in the Microsoft Entra admin center and must include both direct and transitive group memberships. Which scope should you select when creating the access review?
Select an answer first
2expert · hard
An access review for a group that provides access to a financial system has ended. The review was configured with auto-apply disabled. The results show that 10 users were denied access. The administrator needs to enforce the decisions, but they also need to ensure that the enforcement actions are documented for audit purposes. What should the administrator do?
Select an answer first
3foundation · easy
Where can an administrator view the progress of an ongoing access review?
Select an answer first
4application · medium
A company's compliance team needs to provide evidence to auditors that access reviews are being conducted regularly and that decisions are being enforced. They want to maintain a record of each review's scope, decisions, and actions taken. What is the best way to document access review processes?
Select an answer first
5foundation · easy
Which criterion can be used to filter users in an access review scope?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.

Plan, Implement, and Manage Access Reviews in Microsoft Entra SC-300 Practice Questions (Page 1)

Questions 1–5

Where can an administrator view the progress of an ongoing access review?

A company's compliance team needs to provide evidence to auditors that access reviews are being conducted regularly and that decisions are being enforced. They want to maintain a record of each review's scope, decisions, and actions taken. What is the best way to document access review processes?

Which criterion can be used to filter users in an access review scope?

Keep studying — Plan and automate identity governance