SC-300 Certification Practice Question #114

Question

You have a Microsoft 365 E5 subscription that contains a Microsoft SharePoint Online site named Site1.

You need to ensure that users can request access to Site1. The solution must meet the following requirements:

•	Automatically approve requests from users based on their group membership.
•	Automatically remove the access after 30 days.

What should you do?

Accepted Answer

Both requirements — auto-approve requests based on group membership, and auto-remove access after 30 days — are core entitlement management (access package) capabilities. An access package targets the SharePoint Online site as a resource, its request policy can auto-approve based on the requestor's group membership, and the Lifecycle expiration set to "Number of days = 30" automatically removes the assignment. MS Learn confirms entitlement management "automates access request workflows, access assignments, reviews, and expiration" for SharePoint Online sites. Conditional Access (A) controls how/when users sign in, not self-service access requests; PIM (C) manages just-in-time activation of privileged roles; a Defender for Cloud Apps access policy (D) enforces session controls, none of which provide the request-with-auto-approval plus 30-day auto-removal lifecycle. Suggested Answer, a unanimous 12-vote community result, and MS Learn all agree on B.

More SC-300 practice questions