SC-300 Certification Practice Question #84

Question

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure Microsoft Entra Internet Access.

Which users can manage Microsoft Entra Internet Access?

Accepted Answer

Managing Microsoft Entra Internet Access requires the network-access permissions held by the Global Secure Access Administrator role (`microsoft.networkAccess/allEntities/allProperties/allTasks`), and the Global Administrator inherits full access to all Entra administrative features including Global Secure Access — MS Learn's role-based permissions table marks both Global Admin and Global Secure Access Admin with ✅ for managing/forwarding profiles, security profiles, and logs. The Privileged Role Administrator manages role assignments (PIM/RBAC) only and has none of the network-access permissions, so User3 cannot. That yields User1 + User2 = D. The lone dissent (B, User2 only) wrongly excludes the Global Administrator; the docs show GA can manage every Global Secure Access task, so it is discounted. Suggested Answer, an 11-vote Most Voted, and a 6-👍 Highly Voted comment all agree with the documentation, giving high confidence.

More SC-300 practice questions