SC-300 Certification Practice Question #216

Question

You have a Microsoft 365 E5 subscription that contains two attribute sets named Set1 and Set2. The subscription contains the users shown in the following table.

You have the custom security attributes shown in the following table.

You assign User2 the Attribute Definition Administrator role for Set1.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Accepted Answer

Custom security attributes are walled off from Global Administrator by default, so User1 (Global Admin) cannot modify the Secure1 definition — Row 1 is No. User2, although Global Admin, was granted only Attribute **Definition** Administrator (scoped to Set1); per the MS Learn role-comparison table that role can manage attribute *sets and definitions* but explicitly cannot "read attribute assignments for users" — so it cannot view the *value* of Secure2 on users — Row 2 is No. User3 holds Attribute **Assignment** Administrator, the role that can "Read and update custom security attribute keys and values for users," which covers viewing Secure3 values — Row 3 is Yes. MS Learn, the official suggested answer and the top community comments all converge on No/No/Yes.

More SC-300 practice questions