SC-300 Certification Practice Question #230

Question

Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant.
The tenant contains the groups shown in the following table.

The tenant contains the users shown in the following table.

You create an access review as shown in the following table.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Match each statement against this file's tables. The review scopes **Group2 and Group3** only. **Row 1**: User1 belongs to Group1, and Group1 is not part of the review, so nothing the review does can remove User1 from Group1 → **No**. **Row 2**: User2 belongs to Group2 (and the statement asks about removal from **Group3**, which User2 isn't even a member of); additionally Group2 originates in the on-premises Active Directory domain, and per MS Learn access reviews cannot change the membership of on-prem-synced groups → **No**. **Row 3**: User3 belongs to Group3 (the statement asks about removal from **Group2**, which User3 isn't a member of) → **No**. All three rows are **No**, matching the 30-👍 highly-voted answer and the documentation-backed comments. The competing **NYN** answer is for a later, corrected exam variant where the user-to-group mapping was swapped (User2→Group3, User3→Group2); several commenters (haovo, splearner, OK2020) flag that the live exam table differed from the one shown here. Because this file's tables are the original mapping, the answer is **NNN**; confidence is held at 88 rather than higher due to that well-documented variant split.

More SC-300 practice questions