Microsoft Certified: Azure Administrator Associate Practice Mode

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 2

  N, N, Y is correct For the third statement, it states User 3 can perform an access review of User B (Guest Account). In the image they provide, it says that Group Owners can review guest accounts. Since User 3 is the owner of Group 1 (Group Owner), then they would be able to review User B.

• 1

  The only confusion is with UserB. While, in previous versions, access reviews did not provide any information for nested users, this is no longer true. Access information is provided. However, there isn't any way to approve/deny. This is because access is provided indirectly (through nested group membership). Microsoft states that UserB must be removed from Group2 manually. So the question is "what do we consider access review?" If the answer is just information, then "yes". However, if we are to include the full approve/deny process, then "No" Yea, the question is messed up.

• 3

  Go through this very carefully, It is the correct answer with logic: Statement 1: User3 can perform an access review of User1 Answer: No Reason: User1 is a member-type user, and scope is “guest users only” Statement 2: User3 can perform an access review of UserA Answer: No Reason: UserA is a member-type user and also, UserA is part of a nested group (Group2), not a direct member of Group1 Statement 3: User3 can perform an access review of UserB Answer: No Even though UserB is a guest, they are in a nested group (Group2), not directly in Group1. Nested group users are not included in the access review Final answer: No, No, No.