SC-300 Certification Practice Question #266

Question

You have an Azure subscription named Sub1.

You purchase a Microsoft Entra Permissions Management license.

You need to onboard Permissions Management.

Which two actions should you perform? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Accepted Answer

The item explicitly asks for **two** actions that each form part of the solution, so the single-letter Suggested Answer (C) can only be half of the answer. Onboarding an Azure subscription to Microsoft Entra Permissions Management requires (1) creating a **role assignment for Sub1** so the Permissions Management / CIEM service principal can read the subscription's resources and IAM data (C), and (2) **configuring data collection** within Permissions Management so it begins collecting that authorization system's permission usage (B). The remaining options are distractors: application proxy (A) and Diagnostic settings (D) are unrelated features, a manual app registration (E) is created automatically by the onboarding wizard rather than being a required step, and a data collection rule/DCR (F) is an Azure Monitor construct, not part of Permissions Management onboarding. The Most Voted BC plus MS Learn onboarding guidance outweigh the partial Suggested Answer; confidence is held at 80 because Most Voted has only 2 votes and the published Suggested Answer disagrees by listing one letter.

More SC-300 practice questions