SC-300 Privileged Identity Management PIM Basics Quiz

1. In PIM, which role configuration option limits activation to a specific duration?

Approval duration

Activation maximum duration

Session timeout

Role validity period

2. What is the primary difference between PIM and traditional role-based access control?

PIM is less secure

PIM provides just-in-time access instead of standing privileges

PIM only works with cloud resources

There is no difference

3. In PIM, which feature helps prevent excessive privileged access?

Role expiration and time limits

User login tracking

Email notifications

Password policies

4. What is the benefit of using PIM's self-approval feature?

Eliminates the need for approval

Allows users to bypass security checks

Enables fast activation while maintaining audit trails

Removes activation time limits

5. In PIM, what is a 'permanent eligible' role?

A role that never expires and requires activation

A role that is always active

A temporary role assignment

A role requiring renewal every month

6. Which notification does PIM send when a role activation is requested?

Only to the requester

Only to approvers

To both requester and approvers

To the entire organization

7. What is the audit trail in PIM used for?

Deleting user accounts

Tracking role activations and changes

Encrypting passwords

Blocking user access

8. In PIM, what does 'active' assignment mean?

The role is currently in use

The role is permanently assigned and active

The role has been activated once

The role is pending approval

9. Which of the following is an example of a privileged role in Azure?

Reader

Global Administrator

User Administrator

Both b and c

10. What is the relationship between PIM and Conditional Access?

They are the same feature

PIM cannot integrate with Conditional Access

PIM can trigger Conditional Access policies

Conditional Access replaces PIM

11. What is the primary purpose of Privileged Identity Management (PIM)?

Monitor user login attempts

Provide just-in-time access to privileged roles

Encrypt all user passwords

Track email communications

12. What happens when a PIM role activation expires?

The user is locked out permanently

Access is automatically revoked

An approval is required again

The role becomes permanent

13. Which setting allows PIM to require justification for role activation?

Approval requirement

MFA requirement

Justification requirement

Time limit

14. In PIM, what is 'eligible' assignment?

A permanent role assignment

An assignment requiring activation to use

A role with no approval needed

A role that is always active

15. What is the purpose of PIM access reviews?

Monitor network traffic

Verify users still need privileged access

Track email usage

Measure system uptime

16. Which role requires approval before activation in PIM?

Only Global Administrator

Roles configured with approval requirements

All roles automatically

No roles require approval

17. In PIM, what does MFA requirement during activation enhance?

User productivity

Security posture

System performance

Network bandwidth

18. What is a time-bound role assignment in PIM?

A role that expires after a set period

A role assigned only on weekdays

A role that requires daily renewal

A role limited to business hours

19. Which of the following is a key benefit of using PIM?

Eliminates all security risks

Reduces standing privileged access exposure

Removes the need for password management

Allows unlimited role activation

20. In PIM, what does 'activation' mean?

Creating a new user account

Temporarily enabling a privileged role assignment

Deleting a role from the directory

Assigning permanent admin access