MENU
Your company recently implemented Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
While you review the roles in PIM, you discover that all 15 users in the IT department at the company have
permanent security administrator rights.
You need to ensure that the IT department users only have access to the Security administrator role when
required.
What should you configure for the Security administrator role assignment?
Suggested Answer: D
Get Premium SC-300 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
30 comments · newest first
TA
Tasia
6 months ago
I feel B is too restrictive.
DE
Deane
6 months ago
A could work too, but not ideal.
WH
Whitney
6 months ago
It limits access to when needed.
BE
Beth
7 months ago
Why D?
WH
Whitney
7 months ago
I think D is the best choice.
WI
Willetta
7 months ago
Expiring active assignments sounds like a hassle, though.
KE
Kenny
7 months ago
Just to clarify, D means they can only use the role when needed, right?
CA
Cassie
7 months ago
Wait, all 15 users have permanent rights? That's a huge risk!
EL
Elmira
8 months ago
I disagree, B seems like a better option to keep things secure.
BR
Brandee
8 months ago
Definitely go with D, makes the most sense for temporary access.
BA
Barney
8 months ago
Option D is the way to go. Gotta keep those IT guys on a tight leash, you know?
PO
Polly
8 months ago
Haha, I bet the IT team is thrilled to have permanent admin rights. Time to start a side business!
RO
Rozella
9 months ago
Definitely D. Eligible assignments are the way to keep things secure while still giving the IT team the access they need.
JU
Julie
9 months ago
I agree, making the assignments eligible is the way to go. Permanent admin rights are a security risk.
NI
Nidia
9 months ago
Option D is the correct answer. Eligible assignments allow users to activate the role when needed, rather than having permanent access.
CH
Christiane
9 months ago
I feel like I might be mixing up the options, but I think "Expire active assignments" could be a way to manage their access too.
FL
Floyd
9 months ago
I practiced a similar question where we had to limit access, and I think the key was making sure they weren't always active.
KA
Katina
9 months ago
I'm not entirely sure, but I remember something about expiring assignments. Is that related to the active or eligible assignments?
DA
Dana
10 months ago
I think we need to set the assignment type to Eligible so that users only get access when they need it.
LE
Leeann
10 months ago
I'm not totally sure about the difference between options A and B. I'll need to double-check the details on expiring eligible vs. active assignments.
AL
Albert
10 months ago
This seems straightforward. I'll go with option D to set the assignment type to eligible, and then I'll look at the expiration settings to make sure the users don't have permanent access.
NI
Nikita
10 months ago
This question is tricky.
BR
Brandee
10 months ago
Okay, I've got this. I just need to set the assignment type to eligible and then configure the expiration settings so the users only have access when they need it.
SH
Shawn
11 months ago
Hmm, I'm a bit confused on the difference between active and eligible assignments. I'll need to review that in the documentation.
MU
Murray
11 months ago
I think I know how to approach this one. I'll need to look at the role settings and configure the assignment type to be eligible rather than permanent.
ES
Essie
6 months ago
Plus, it keeps things organized in PIM.
KE
Kerrie
6 months ago
Exactly! It reduces security risks too.
RO
Rory
6 months ago
I agree, making the assignment type eligible is the way to go.
TI
Titus
11 months ago
Yes, that way they only have access when needed.
MA
Margot
11 months ago
Good call! Let's implement that change.