An administrator needs to create an access review for a dynamic group that contains all users in the Marketing department. The review must be recurring monthly and the group owner should be the reviewer. The administrator prefers to use PowerShell for automation. What should the administrator do?

Use the Microsoft Graph API to create the access review, because PowerShell does not support access reviews.

Use the Set-AzureADMSAccessReview cmdlet to create a new review.

Use the New-AzureADMSAccessReview PowerShell cmdlet with the group ID and set the recurrence to monthly.

Create the review in the portal and then export the configuration to PowerShell.

After an access review for a group of temporary workers, the results show that 80% of the users were approved and 20% were denied. The security team wants to understand why certain users were denied and to identify any patterns. They also need to document the outcomes for an upcoming audit. What should they do?

Re-run the access review to see if the results change

Export the review results and analyze the reasons provided by reviewers

Check the sign-in logs for the denied users

Delete the review to avoid confusion

Which compliance requirement is commonly addressed by conducting access reviews?

Automatically encrypting all data stored in Microsoft 365

Providing evidence that access rights are periodically recertified

Ensuring that all users have the same level of access regardless of role

Guaranteeing that no external users are ever granted access

In which scenario is an access review most appropriate?

When a new application is deployed and users need to be assigned access for the first time

When an employee leaves the company and their account must be disabled immediately

When a security incident requires immediate revocation of a compromised account's access

When a group has accumulated members over time and the organization needs to confirm each member still requires access

Who can be designated as a reviewer for an access review?

Selected users, group owners, or the user themselves

Microsoft Certified:Identity and Access Administrator Associate

Domain 4Objective 2

Plan, Implement, and Manage Access Reviews in Microsoft Entra SC-300 Practice Questions (Page 5)

Part of the Plan and automate identity governance domain, which accounts for 20–25% of the SC-300 exam. Microsoft does not publish an official question count, but from its 100-minute exam (~40–65 total, ~8–16 in this domain), expect 2–4 from this objective — we provide 39 practice questions to prepare you well beyond it. (estimate)

39questions here

8free pages

11concepts

20–25%of the exam

Questions 21–25

21application · medium
An administrator needs to create an access review for a dynamic group that contains all users in the Marketing department. The review must be recurring monthly and the group owner should be the reviewer. The administrator prefers to use PowerShell for automation. What should the administrator do?
Select an answer first
22application · medium
After an access review for a group of temporary workers, the results show that 80% of the users were approved and 20% were denied. The security team wants to understand why certain users were denied and to identify any patterns. They also need to document the outcomes for an upcoming audit. What should they do?
Select an answer first
23foundation · easy
Which compliance requirement is commonly addressed by conducting access reviews?
Select an answer first
24foundation · easy
In which scenario is an access review most appropriate?
Select an answer first
25foundation · easy
Who can be designated as a reviewer for an access review?
Select an answer first

Finished these 5 questions?

Review the revealed explanations, or continue through the curriculum.

Next 5 questions →Back to SC-300

Free Basic Practice is a study aid with revealable answers — not a scored exam. Examers.io is independent and not affiliated with or endorsed by Microsoft. “SC-300” is a trademark of its owner, used for identification only.