Microsoft SC-300 Access Reviews and Access Recertification Practice Test

 

Topic 14 covers access reviews and access recertification for the Microsoft Certified: Identity and Access Administrator Associate certification. These original practice questions apply the verified SC-300 objectives to practical decisions and troubleshooting. Select one answer unless a fixed number is requested. For broader preparation, visit the SC-300 Exam Dumps page. Each option includes an explanation of the relevant behavior and scenario constraints.

Question 1

A production issue involving an access-recertification campaign has been narrowed to this requirement: the appropriate review scope for group or application access. The organization requires a supported Microsoft-managed control. Which action best satisfies the requirement?

1. Record a manual access-review decision with the required justification when automated recommendations are not sufficient.
2. Check license and resource eligibility before rollout in access-review configuration, reviewer progress, decisions, and applied results before changing unrelated settings.
3. Create the access review against the exact group, application, role, or access package assignment that must be recertified.
4. Define recurrence without overlapping decision periods explicitly in the access reviews configuration.
5. Verify whether completed decisions were applied using access-review configuration, reviewer progress, decisions, and applied results before closing the issue.

Correct Answer: C

 

Correct Answer

Answer C is correct because This action directly provides the appropriate review scope for group or application access. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is application of completed review results manually when required. The scenario instead requires the appropriate review scope for group or application access, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is verification of license and resource eligibility before rollout. The scenario instead requires the appropriate review scope for group or application access, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is definition of recurrence without overlapping decision periods. The scenario instead requires the appropriate review scope for group or application access, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is verify whether completed decisions were applied. The scenario instead requires the appropriate review scope for group or application access, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 2

The security review of an access review owned by a business resource owner focuses on one acceptance criterion: the appropriate reviewer type for business accountability. The current population and assignment scope must be preserved. Which action best satisfies the requirement?

1. Configure review population including guests only when required in access reviews and verify the effective result.
2. Investigate access remaining through alternate assignment path using access-review configuration, reviewer progress, decisions, and applied results.
3. Validate that the target group, application, or access-package assignment is supported for the intended access-review scope.
4. Choose reviewers who are accountable for the access decision, such as resource owners, managers, or users as appropriate.
5. Stop or reset instance under stated correction need only through the supported access reviews correction workflow and preserve audit evidence.

Correct Answer: D

 

Correct Answer

Answer D is correct because This action directly provides the appropriate reviewer type for business accountability. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is correct configuration of review population including guests only when required. The scenario instead requires the appropriate reviewer type for business accountability, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is investigation of access remaining through alternate assignment path. The scenario instead requires the appropriate reviewer type for business accountability, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is diagnosis of unsupported group or membership scope. The scenario instead requires the appropriate reviewer type for business accountability, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is stop or reset instance under stated correction need. The scenario instead requires the appropriate reviewer type for business accountability, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 3

The team is validating a quarterly access-recertification campaign. The decisive requirement is: a controlled plan for recurring review cadence and duration. Existing working access outside the stated scope must remain unchanged. Which action best satisfies the requirement?

1. Export audit evidence for specified review instance from the relevant access reviews audit or reporting view.
2. Remove access through correct source of membership only after access-review configuration, reviewer progress, decisions, and applied results confirms the replacement or remaining access path.
3. Set multi-stage decision process for requirement in access reviews to match the stated lifecycle or policy requirement.
4. Use the access-review status and reviewer progress to track completed and outstanding decisions.
5. Configure a recurring access-review schedule and duration that matches the governance cadence.

Correct Answer: E

 

Correct Answer

Answer E is correct because This action directly provides a controlled plan for recurring review cadence and duration. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is export of audit evidence for specified review instance. The scenario instead requires a controlled plan for recurring review cadence and duration, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is removal of access through correct source of membership. The scenario instead requires a controlled plan for recurring review cadence and duration, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is the required setting for multi-stage decision process for requirement. The scenario instead requires a controlled plan for recurring review cadence and duration, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is tracking of completion and outstanding reviewer decisions. The scenario instead requires a controlled plan for recurring review cadence and duration, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 4

Operations staff investigating an access review owned by a business resource owner have isolated the issue to: definition of fallback reviewer for unavailable owner. The change will be piloted before broader enforcement. Which action best satisfies the requirement?

1. Interpret recommendation as evidence rather than final decision using access-review configuration, reviewer progress, decisions, and applied results rather than inferring it from configuration alone.
2. Configure an alternate or fallback reviewer so the access review can complete when the primary owner is unavailable.
3. Confirm post-review state without assuming completion equals removal from access-review configuration, reviewer progress, decisions, and applied results rather than assuming the configured state took effect.
4. Configure whether access-review results should be applied automatically only after validating the removal impact.
5. Submit approve or deny with business justification through the supported access reviews workflow and retain the audit evidence.

Correct Answer: B

 

Correct Answer

Answer B is correct because This action directly provides definition of fallback reviewer for unavailable owner. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is correct interpretation of recommendation as evidence rather than final decision. The scenario instead requires definition of fallback reviewer for unavailable owner, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is confirm post-review state without assuming completion equals removal. The scenario instead requires definition of fallback reviewer for unavailable owner, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is enablement of automatic application of approved review results. The scenario instead requires definition of fallback reviewer for unavailable owner, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is submit approve or deny with business justification. The scenario instead requires definition of fallback reviewer for unavailable owner, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 5

The administrator must correct a review using inactivity-based recommendations without changing adjacent controls. The target condition is: the appropriate recommendation and no-response behavior. The tenant has the licensing required for the named capability. Which action best satisfies the requirement?

1. Configure the access-review recommendation and no-response behavior to match the organization’s risk and removal policy.
2. Resolve no-response outcome under configured policy in access reviews without broadening unrelated access.
3. Create the access review against the exact group, application, role, or access package assignment that must be recertified.
4. Identify reviewers requiring escalation before deadline from access-review configuration, reviewer progress, decisions, and applied results before changing configuration.
5. Configure reminders and reviewer notifications in access reviews and verify the effective result.

Correct Answer: A

 

Correct Answer

Answer A is correct because This action directly provides the appropriate recommendation and no-response behavior. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer B is incorrect because This action is appropriate when the requirement is resolution of no-response outcome under configured policy. The scenario instead requires the appropriate recommendation and no-response behavior, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is the appropriate review scope for group or application access. The scenario instead requires the appropriate recommendation and no-response behavior, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is identify reviewers requiring escalation before deadline. The scenario instead requires the appropriate recommendation and no-response behavior, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is correct configuration of reminders and reviewer notifications. The scenario instead requires the appropriate recommendation and no-response behavior, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 6

An audit of an access-recertification campaign identifies this control gap: verification of license and resource eligibility before rollout. The correction must address the named control boundary rather than reset unrelated tenant settings. Choose TWO actions that together implement and verify the requirement.

1. Choose reviewers who are accountable for the access decision, such as resource owners, managers, or users as appropriate.
2. Verify whether completed decisions were applied using access-review configuration, reviewer progress, decisions, and applied results before closing the issue.
3. Review the access-review results and resulting access state to confirm the review decision was applied as intended.
4. Check license and resource eligibility before rollout in access-review configuration, reviewer progress, decisions, and applied results before changing unrelated settings.
5. Record a manual access-review decision with the required justification when automated recommendations are not sufficient.
6. Define recurrence without overlapping decision periods explicitly in the access reviews configuration.

Correct Answers: C, D

 

Correct Answers

Answer C is correct because This verification step confirms that the selected control changes effective behavior for the intended pilot and exposes policy, assignment, propagation, or evidence problems before wider rollout.

Answer D is correct because This action directly provides verification of license and resource eligibility before rollout at the correct Microsoft Entra control boundary.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is the appropriate reviewer type for business accountability. It does not implement or verify verification of license and resource eligibility before rollout in this scenario.

Answer B is incorrect because This action is appropriate when the requirement is verify whether completed decisions were applied. It does not implement or verify verification of license and resource eligibility before rollout in this scenario.

Answer E is incorrect because This action is appropriate when the requirement is application of completed review results manually when required. It does not implement or verify verification of license and resource eligibility before rollout in this scenario.

Answer F is incorrect because This action is appropriate when the requirement is definition of recurrence without overlapping decision periods. It does not implement or verify verification of license and resource eligibility before rollout in this scenario.

 

Question 7

The documented success criterion for an access review limited to external users is: correct configuration of review population including guests only when required. No new standing administrator privilege may be introduced. Which action best satisfies the requirement?

1. Investigate access remaining through alternate assignment path using access-review configuration, reviewer progress, decisions, and applied results.
2. Stop or reset instance under stated correction need only through the supported access reviews correction workflow and preserve audit evidence.
3. Validate that the target group, application, or access-package assignment is supported for the intended access-review scope.
4. Configure a recurring access-review schedule and duration that matches the governance cadence.
5. Configure review population including guests only when required in access reviews and verify the effective result.

Correct Answer: E

 

Correct Answer

Answer E is correct because This action directly provides correct configuration of review population including guests only when required. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is investigation of access remaining through alternate assignment path. The scenario instead requires correct configuration of review population including guests only when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is stop or reset instance under stated correction need. The scenario instead requires correct configuration of review population including guests only when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is diagnosis of unsupported group or membership scope. The scenario instead requires correct configuration of review population including guests only when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is a controlled plan for recurring review cadence and duration. The scenario instead requires correct configuration of review population including guests only when required, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 8

The current configuration of an access-recertification campaign is otherwise acceptable. The unresolved requirement is: the required setting for multi-stage decision process for requirement. General network connectivity outside the identity path is already verified. Which action best satisfies the requirement?

1. Set multi-stage decision process for requirement in access reviews to match the stated lifecycle or policy requirement.
2. Export audit evidence for specified review instance from the relevant access reviews audit or reporting view.
3. Use the access-review status and reviewer progress to track completed and outstanding decisions.
4. Remove access through correct source of membership only after access-review configuration, reviewer progress, decisions, and applied results confirms the replacement or remaining access path.
5. Configure an alternate or fallback reviewer so the access review can complete when the primary owner is unavailable.

Correct Answer: A

 

Correct Answer

Answer A is correct because This action directly provides the required setting for multi-stage decision process for requirement. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer B is incorrect because This action is appropriate when the requirement is export of audit evidence for specified review instance. The scenario instead requires the required setting for multi-stage decision process for requirement, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is tracking of completion and outstanding reviewer decisions. The scenario instead requires the required setting for multi-stage decision process for requirement, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is removal of access through correct source of membership. The scenario instead requires the required setting for multi-stage decision process for requirement, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is definition of fallback reviewer for unavailable owner. The scenario instead requires the required setting for multi-stage decision process for requirement, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 9

A troubleshooting review of a completed review whose decisions must be applied confirms that the next action must address: enablement of automatic application of approved review results. Resource permissions outside the identity control are already correct. Which action best satisfies the requirement?

1. Submit approve or deny with business justification through the supported access reviews workflow and retain the audit evidence.
2. Interpret recommendation as evidence rather than final decision using access-review configuration, reviewer progress, decisions, and applied results rather than inferring it from configuration alone.
3. Configure the access-review recommendation and no-response behavior to match the organization’s risk and removal policy.
4. Confirm post-review state without assuming completion equals removal from access-review configuration, reviewer progress, decisions, and applied results rather than assuming the configured state took effect.
5. Configure whether access-review results should be applied automatically only after validating the removal impact.

Correct Answer: E

 

Correct Answer

Answer E is correct because This action directly provides enablement of automatic application of approved review results. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is submit approve or deny with business justification. The scenario instead requires enablement of automatic application of approved review results, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is correct interpretation of recommendation as evidence rather than final decision. The scenario instead requires enablement of automatic application of approved review results, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is the appropriate recommendation and no-response behavior. The scenario instead requires enablement of automatic application of approved review results, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is confirm post-review state without assuming completion equals removal. The scenario instead requires enablement of automatic application of approved review results, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 10

A staged rollout of an access review owned by a business resource owner cannot proceed until the team can demonstrate: correct configuration of reminders and reviewer notifications. The administrator must verify the effective result from Microsoft Entra evidence. Which action best satisfies the requirement?

1. Resolve no-response outcome under configured policy in access reviews without broadening unrelated access.
2. Identify reviewers requiring escalation before deadline from access-review configuration, reviewer progress, decisions, and applied results before changing configuration.
3. Configure reminders and reviewer notifications in access reviews and verify the effective result.
4. Check license and resource eligibility before rollout in access-review configuration, reviewer progress, decisions, and applied results before changing unrelated settings.
5. Create the access review against the exact group, application, role, or access package assignment that must be recertified.

Correct Answer: C

 

Correct Answer

Answer C is correct because This action directly provides correct configuration of reminders and reviewer notifications. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is resolution of no-response outcome under configured policy. The scenario instead requires correct configuration of reminders and reviewer notifications, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is identify reviewers requiring escalation before deadline. The scenario instead requires correct configuration of reminders and reviewer notifications, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is verification of license and resource eligibility before rollout. The scenario instead requires correct configuration of reminders and reviewer notifications, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is the appropriate review scope for group or application access. The scenario instead requires correct configuration of reminders and reviewer notifications, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 11

The team compares supported controls for a quarterly access-recertification campaign. The deciding condition is: definition of recurrence without overlapping decision periods. The organization requires a supported Microsoft-managed control. Which action best satisfies the requirement?

1. Configure review population including guests only when required in access reviews and verify the effective result.
2. Choose reviewers who are accountable for the access decision, such as resource owners, managers, or users as appropriate.
3. Verify whether completed decisions were applied using access-review configuration, reviewer progress, decisions, and applied results before closing the issue.
4. Define recurrence without overlapping decision periods explicitly in the access reviews configuration.
5. Record a manual access-review decision with the required justification when automated recommendations are not sufficient.

Correct Answer: D

 

Correct Answer

Answer D is correct because This action directly provides definition of recurrence without overlapping decision periods. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is correct configuration of review population including guests only when required. The scenario instead requires definition of recurrence without overlapping decision periods, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is the appropriate reviewer type for business accountability. The scenario instead requires definition of recurrence without overlapping decision periods, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is verify whether completed decisions were applied. The scenario instead requires definition of recurrence without overlapping decision periods, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is application of completed review results manually when required. The scenario instead requires definition of recurrence without overlapping decision periods, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 12

The identity architect is reviewing an access-recertification campaign. The required outcome is: diagnosis of unsupported group or membership scope. The current population and assignment scope must be preserved. Choose TWO actions that together implement and verify the requirement.

1. Review the access-review results and resulting access state to confirm the review decision was applied as intended.
2. Configure a recurring access-review schedule and duration that matches the governance cadence.
3. Validate that the target group, application, or access-package assignment is supported for the intended access-review scope.
4. Stop or reset instance under stated correction need only through the supported access reviews correction workflow and preserve audit evidence.
5. Set multi-stage decision process for requirement in access reviews to match the stated lifecycle or policy requirement.
6. Investigate access remaining through alternate assignment path using access-review configuration, reviewer progress, decisions, and applied results.

Correct Answers: A, C

 

Correct Answers

Answer A is correct because This verification step confirms that the selected control changes effective behavior for the intended pilot and exposes policy, assignment, propagation, or evidence problems before wider rollout.

Answer C is correct because This action directly provides diagnosis of unsupported group or membership scope at the correct Microsoft Entra control boundary.

Incorrect Answers

Answer B is incorrect because This action is appropriate when the requirement is a controlled plan for recurring review cadence and duration. It does not implement or verify diagnosis of unsupported group or membership scope in this scenario.

Answer D is incorrect because This action is appropriate when the requirement is stop or reset instance under stated correction need. It does not implement or verify diagnosis of unsupported group or membership scope in this scenario.

Answer E is incorrect because This action is appropriate when the requirement is the required setting for multi-stage decision process for requirement. It does not implement or verify diagnosis of unsupported group or membership scope in this scenario.

Answer F is incorrect because This action is appropriate when the requirement is investigation of access remaining through alternate assignment path. It does not implement or verify diagnosis of unsupported group or membership scope in this scenario.

 

Question 13

The change owner has limited the remediation for an access review owned by a business resource owner to this outcome: tracking of completion and outstanding reviewer decisions. Existing working access outside the stated scope must remain unchanged. Which action best satisfies the requirement?

1. Configure an alternate or fallback reviewer so the access review can complete when the primary owner is unavailable.
2. Export audit evidence for specified review instance from the relevant access reviews audit or reporting view.
3. Configure whether access-review results should be applied automatically only after validating the removal impact.
4. Use the access-review status and reviewer progress to track completed and outstanding decisions.
5. Remove access through correct source of membership only after access-review configuration, reviewer progress, decisions, and applied results confirms the replacement or remaining access path.

Correct Answer: D

 

Correct Answer

Answer D is correct because This action directly provides tracking of completion and outstanding reviewer decisions. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is definition of fallback reviewer for unavailable owner. The scenario instead requires tracking of completion and outstanding reviewer decisions, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is export of audit evidence for specified review instance. The scenario instead requires tracking of completion and outstanding reviewer decisions, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is enablement of automatic application of approved review results. The scenario instead requires tracking of completion and outstanding reviewer decisions, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is removal of access through correct source of membership. The scenario instead requires tracking of completion and outstanding reviewer decisions, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 14

A change request for a review using inactivity-based recommendations will be accepted only when the following is true: correct interpretation of recommendation as evidence rather than final decision. The change will be piloted before broader enforcement. Which action best satisfies the requirement?

1. Submit approve or deny with business justification through the supported access reviews workflow and retain the audit evidence.
2. Treat the access-review recommendation as decision support only; the designated reviewer must still make or accept the final review decision under the configured policy.
3. Configure reminders and reviewer notifications in access reviews and verify the effective result.
4. Confirm post-review state without assuming completion equals removal from access-review configuration, reviewer progress, decisions, and applied results rather than assuming the configured state took effect.
5. Configure the access-review recommendation and no-response behavior to match the organization’s risk and removal policy.

Correct Answer: B

 

Correct Answer

Answer B is correct because This action directly resolves interpret recommendation as evidence rather than final decision at the evidence or control boundary described by the scenario, rather than substituting a neighboring identity workflow.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is submit approve or deny with business justification. The scenario instead requires correct interpretation of recommendation as evidence rather than final decision, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is correct configuration of reminders and reviewer notifications. The scenario instead requires correct interpretation of recommendation as evidence rather than final decision, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is confirm post-review state without assuming completion equals removal. The scenario instead requires correct interpretation of recommendation as evidence rather than final decision, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is the appropriate recommendation and no-response behavior. The scenario instead requires correct interpretation of recommendation as evidence rather than final decision, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 15

The implementation of an access review owned by a business resource owner is complete except for this requirement: identify reviewers requiring escalation before deadline. The tenant has the licensing required for the named capability. Which action best satisfies the requirement?

1. Check license and resource eligibility before rollout in access-review configuration, reviewer progress, decisions, and applied results before changing unrelated settings.
2. Identify reviewers requiring escalation before deadline from access-review configuration, reviewer progress, decisions, and applied results before changing configuration.
3. Define recurrence without overlapping decision periods explicitly in the access reviews configuration.
4. Create the access review against the exact group, application, role, or access package assignment that must be recertified.
5. Resolve no-response outcome under configured policy in access reviews without broadening unrelated access.

Correct Answer: B

 

Correct Answer

Answer B is correct because This action directly provides identify reviewers requiring escalation before deadline. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is verification of license and resource eligibility before rollout. The scenario instead requires identify reviewers requiring escalation before deadline, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is definition of recurrence without overlapping decision periods. The scenario instead requires identify reviewers requiring escalation before deadline, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is the appropriate review scope for group or application access. The scenario instead requires identify reviewers requiring escalation before deadline, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is resolution of no-response outcome under configured policy. The scenario instead requires identify reviewers requiring escalation before deadline, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 16

The support team has ruled out unrelated causes in an access-recertification campaign. The remaining issue is: verify whether completed decisions were applied. The correction must address the named control boundary rather than reset unrelated tenant settings. Which action best satisfies the requirement?

1. Validate that the target group, application, or access-package assignment is supported for the intended access-review scope.
2. Check the completed access-review decisions and the applied-results state to verify that approved removals or retained access actually took effect.
3. Configure review population including guests only when required in access reviews and verify the effective result.
4. Choose reviewers who are accountable for the access decision, such as resource owners, managers, or users as appropriate.
5. Record a manual access-review decision with the required justification when automated recommendations are not sufficient.

Correct Answer: B

 

Correct Answer

Answer B is correct because This action directly resolves verify whether completed decisions were applied at the evidence or control boundary described by the scenario, rather than substituting a neighboring identity workflow.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is diagnosis of unsupported group or membership scope. The scenario instead requires verify whether completed decisions were applied, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is correct configuration of review population including guests only when required. The scenario instead requires verify whether completed decisions were applied, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is the appropriate reviewer type for business accountability. The scenario instead requires verify whether completed decisions were applied, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is application of completed review results manually when required. The scenario instead requires verify whether completed decisions were applied, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 17

A readiness check of an access-recertification campaign leaves one unresolved condition: investigation of access remaining through alternate assignment path. No new standing administrator privilege may be introduced. Which action best satisfies the requirement?

1. Configure a recurring access-review schedule and duration that matches the governance cadence.
2. Use the access-review status and reviewer progress to track completed and outstanding decisions.
3. Trace the user’s remaining access through group, application, role, or access-package assignments to find an alternate path that the completed review did not remove.
4. Stop or reset instance under stated correction need only through the supported access reviews correction workflow and preserve audit evidence.
5. Set multi-stage decision process for requirement in access reviews to match the stated lifecycle or policy requirement.

Correct Answer: C

 

Correct Answer

Answer C is correct because This action directly resolves investigate access remaining through alternate assignment path at the evidence or control boundary described by the scenario, rather than substituting a neighboring identity workflow.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is a controlled plan for recurring review cadence and duration. The scenario instead requires investigation of access remaining through alternate assignment path, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is tracking of completion and outstanding reviewer decisions. The scenario instead requires investigation of access remaining through alternate assignment path, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is stop or reset instance under stated correction need. The scenario instead requires investigation of access remaining through alternate assignment path, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is the required setting for multi-stage decision process for requirement. The scenario instead requires investigation of access remaining through alternate assignment path, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 18

Testing of an access-recertification campaign is successful except for this condition: export of audit evidence for specified review instance. General network connectivity outside the identity path is already verified. Choose TWO actions that together implement and verify the requirement.

1. Interpret recommendation as evidence rather than final decision using access-review configuration, reviewer progress, decisions, and applied results rather than inferring it from configuration alone.
2. Export audit evidence for specified review instance from the relevant access reviews audit or reporting view.
3. Remove access through correct source of membership only after access-review configuration, reviewer progress, decisions, and applied results confirms the replacement or remaining access path.
4. Review the access-review results and resulting access state to confirm the review decision was applied as intended.
5. Configure whether access-review results should be applied automatically only after validating the removal impact.
6. Configure an alternate or fallback reviewer so the access review can complete when the primary owner is unavailable.

Correct Answers: B, D

 

Correct Answers

Answer B is correct because This action directly provides export of audit evidence for specified review instance at the correct Microsoft Entra control boundary.

Answer D is correct because This verification step confirms that the selected control changes effective behavior for the intended pilot and exposes policy, assignment, propagation, or evidence problems before wider rollout.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is correct interpretation of recommendation as evidence rather than final decision. It does not implement or verify export of audit evidence for specified review instance in this scenario.

Answer C is incorrect because This action is appropriate when the requirement is removal of access through correct source of membership. It does not implement or verify export of audit evidence for specified review instance in this scenario.

Answer E is incorrect because This action is appropriate when the requirement is enablement of automatic application of approved review results. It does not implement or verify export of audit evidence for specified review instance in this scenario.

Answer F is incorrect because This action is appropriate when the requirement is definition of fallback reviewer for unavailable owner. It does not implement or verify export of audit evidence for specified review instance in this scenario.

 

Question 19

The organization wants the least-disruptive correction to an access-recertification campaign. It must provide: submit approve or deny with business justification. Resource permissions outside the identity control are already correct. Which action best satisfies the requirement?

1. Confirm post-review state without assuming completion equals removal from access-review configuration, reviewer progress, decisions, and applied results rather than assuming the configured state took effect.
2. Identify reviewers requiring escalation before deadline from access-review configuration, reviewer progress, decisions, and applied results before changing configuration.
3. Configure the access-review recommendation and no-response behavior to match the organization’s risk and removal policy.
4. Configure reminders and reviewer notifications in access reviews and verify the effective result.
5. Submit approve or deny with business justification through the supported access reviews workflow and retain the audit evidence.

Correct Answer: E

 

Correct Answer

Answer E is correct because This action directly provides submit approve or deny with business justification. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is confirm post-review state without assuming completion equals removal. The scenario instead requires submit approve or deny with business justification, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is identify reviewers requiring escalation before deadline. The scenario instead requires submit approve or deny with business justification, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is the appropriate recommendation and no-response behavior. The scenario instead requires submit approve or deny with business justification, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is correct configuration of reminders and reviewer notifications. The scenario instead requires submit approve or deny with business justification, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 20

A design review of an access-recertification campaign identifies one remaining requirement: resolution of no-response outcome under configured policy. The administrator must verify the effective result from Microsoft Entra evidence. Which action best satisfies the requirement?

1. Resolve no-response outcome under configured policy in access reviews without broadening unrelated access.
2. Check license and resource eligibility before rollout in access-review configuration, reviewer progress, decisions, and applied results before changing unrelated settings.
3. Define recurrence without overlapping decision periods explicitly in the access reviews configuration.
4. Create the access review against the exact group, application, role, or access package assignment that must be recertified.
5. Verify whether completed decisions were applied using access-review configuration, reviewer progress, decisions, and applied results before closing the issue.

Correct Answer: A

 

Correct Answer

Answer A is correct because This action directly provides resolution of no-response outcome under configured policy. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer B is incorrect because This action is appropriate when the requirement is verification of license and resource eligibility before rollout. The scenario instead requires resolution of no-response outcome under configured policy, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is definition of recurrence without overlapping decision periods. The scenario instead requires resolution of no-response outcome under configured policy, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is the appropriate review scope for group or application access. The scenario instead requires resolution of no-response outcome under configured policy, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is verify whether completed decisions were applied. The scenario instead requires resolution of no-response outcome under configured policy, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 21

Current evidence from a completed review whose decisions must be applied shows that this requirement is not yet met: application of completed review results manually when required. The organization requires a supported Microsoft-managed control. Which action best satisfies the requirement?

1. Configure review population including guests only when required in access reviews and verify the effective result.
2. Record a manual access-review decision with the required justification when automated recommendations are not sufficient.
3. Investigate access remaining through alternate assignment path using access-review configuration, reviewer progress, decisions, and applied results.
4. Choose reviewers who are accountable for the access decision, such as resource owners, managers, or users as appropriate.
5. Validate that the target group, application, or access-package assignment is supported for the intended access-review scope.

Correct Answer: B

 

Correct Answer

Answer B is correct because This action directly provides application of completed review results manually when required. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is correct configuration of review population including guests only when required. The scenario instead requires application of completed review results manually when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is investigation of access remaining through alternate assignment path. The scenario instead requires application of completed review results manually when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is the appropriate reviewer type for business accountability. The scenario instead requires application of completed review results manually when required, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is diagnosis of unsupported group or membership scope. The scenario instead requires application of completed review results manually when required, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 22

Before expanding an access-recertification campaign, the administrator must satisfy this condition: stop or reset instance under stated correction need. The current population and assignment scope must be preserved. Which action best satisfies the requirement?

1. Stop or reset instance under stated correction need only through the supported access reviews correction workflow and preserve audit evidence.
2. Export audit evidence for specified review instance from the relevant access reviews audit or reporting view.
3. Configure a recurring access-review schedule and duration that matches the governance cadence.
4. Use the access-review status and reviewer progress to track completed and outstanding decisions.
5. Set multi-stage decision process for requirement in access reviews to match the stated lifecycle or policy requirement.

Correct Answer: A

 

Correct Answer

Answer A is correct because This action directly provides stop or reset instance under stated correction need. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer B is incorrect because This action is appropriate when the requirement is export of audit evidence for specified review instance. The scenario instead requires stop or reset instance under stated correction need, so this option would solve an adjacent identity problem rather than the documented gap.

Answer C is incorrect because This action is appropriate when the requirement is a controlled plan for recurring review cadence and duration. The scenario instead requires stop or reset instance under stated correction need, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is tracking of completion and outstanding reviewer decisions. The scenario instead requires stop or reset instance under stated correction need, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is the required setting for multi-stage decision process for requirement. The scenario instead requires stop or reset instance under stated correction need, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 23

The administrator is preparing an access-recertification campaign for production. The required condition is: removal of access through correct source of membership. Existing working access outside the stated scope must remain unchanged. Which action best satisfies the requirement?

1. Configure an alternate or fallback reviewer so the access review can complete when the primary owner is unavailable.
2. Configure whether access-review results should be applied automatically only after validating the removal impact.
3. Remove access through correct source of membership only after access-review configuration, reviewer progress, decisions, and applied results confirms the replacement or remaining access path.
4. Submit approve or deny with business justification through the supported access reviews workflow and retain the audit evidence.
5. Interpret recommendation as evidence rather than final decision using access-review configuration, reviewer progress, decisions, and applied results rather than inferring it from configuration alone.

Correct Answer: C

 

Correct Answer

Answer C is correct because This action directly provides removal of access through correct source of membership. It changes the control that owns the stated requirement while preserving unrelated access and can be verified with Microsoft Entra evidence.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is definition of fallback reviewer for unavailable owner. The scenario instead requires removal of access through correct source of membership, so this option would solve an adjacent identity problem rather than the documented gap.

Answer B is incorrect because This action is appropriate when the requirement is enablement of automatic application of approved review results. The scenario instead requires removal of access through correct source of membership, so this option would solve an adjacent identity problem rather than the documented gap.

Answer D is incorrect because This action is appropriate when the requirement is submit approve or deny with business justification. The scenario instead requires removal of access through correct source of membership, so this option would solve an adjacent identity problem rather than the documented gap.

Answer E is incorrect because This action is appropriate when the requirement is correct interpretation of recommendation as evidence rather than final decision. The scenario instead requires removal of access through correct source of membership, so this option would solve an adjacent identity problem rather than the documented gap.

 

Question 24

A production issue involving an access-recertification campaign has been narrowed to this requirement: confirm post-review state without assuming completion equals removal. The change will be piloted before broader enforcement. Choose TWO actions that together implement and verify the requirement.

1. Identify reviewers requiring escalation before deadline from access-review configuration, reviewer progress, decisions, and applied results before changing configuration.
2. Verify the user’s effective post-review access after results are applied; review completion alone does not prove that access was removed.
3. Configure reminders and reviewer notifications in access reviews and verify the effective result.
4. Review the access-review results and resulting access state to confirm the review decision was applied as intended.
5. Resolve no-response outcome under configured policy in access reviews without broadening unrelated access.
6. Configure the access-review recommendation and no-response behavior to match the organization’s risk and removal policy.

Correct Answers: B, D

 

Correct Answers

Answer B is correct because This action directly resolves confirm post-review state without assuming completion equals removal at the evidence or control boundary described by the scenario, rather than substituting a neighboring identity workflow.

Answer D is correct because This verification step confirms that the selected control changes effective behavior for the intended pilot and exposes policy, assignment, propagation, or evidence problems before wider rollout.

Incorrect Answers

Answer A is incorrect because This action is appropriate when the requirement is identify reviewers requiring escalation before deadline. It does not implement or verify confirm post-review state without assuming completion equals removal in this scenario.

Answer C is incorrect because This action is appropriate when the requirement is correct configuration of reminders and reviewer notifications. It does not implement or verify confirm post-review state without assuming completion equals removal in this scenario.

Answer E is incorrect because This action is appropriate when the requirement is resolution of no-response outcome under configured policy. It does not implement or verify confirm post-review state without assuming completion equals removal in this scenario.

Answer F is incorrect because This action is appropriate when the requirement is the appropriate recommendation and no-response behavior. It does not implement or verify confirm post-review state without assuming completion equals removal in this scenario.