SC-300 Certification Practice Question #271

Question

You have a Microsoft 365 subscription that is onboarded to Microsoft Entra Permissions Management.

You need to identify managed identities that are assigned permissions and remove any permissions that have been unused for 90 days. The solution must minimize administrative effort.

What should you do in the Entra Permissions Management portal?

Accepted Answer

The requirement is to identify managed identities with unused permissions AND automatically remove permissions unused for 90 days while minimizing administrative effort. Permissions Management is a CIEM solution that, per MS Learn, "automatically right-sizes" and revokes unused/excessive permissions. Autopilot rules are the feature that executes this remediation automatically on a schedule/condition, whereas a Permissions analytics report (B) only reports unused permissions and still requires an admin to manually revoke them — failing the "minimize administrative effort" and "remove" criteria. Reviewing service principals (C) and running an audit query (D) are likewise read-only. The Suggested Answer, a unanimous Most Voted (A, 4 votes), every commenter, and MS Learn's automatic right-sizing language all agree, so confidence is 90%.

More SC-300 practice questions