DRAG DROP -
You need to configure an access review. The review will be assigned to a new collection of reviews and reviewed by resource owners.
Which three actions should you perform in sequence? To answer, move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:
Step 1: Create an access review program
Step 2: Create an access review control
Step 3: Set Reviewers to Group owners
In the Reviewers section, select either one or more people to review all the users in scope. Or you can select to have the members review their own access. If the resource is a group, you can ask the group owners to review.
References:
https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-programs-controls
The answer is correct. The question itself refers to assigning a "collection of reviews" which means a access review program. In order to assign a program to a access review it must first be created , otherwise only the default program can be assigned. So that is why it is first step.
I agree with PDR, and notice that it says "The review will be assigned to a NEW collection of reviews". So new collection means the collection "program" needs to be created first.
correct ! Program/Control/Owner
Really disappointed with how nobody in exam topics seems to be cleaning up or upgrading their deprecated questions
With the new UI (2021.02.12) it is very hard to answer this question since the terms are not 100% aligning with the terms in the new UI. But still the answer provided here is correct. 1. Since the question talks about creating a collection of access reviews, we first need to create an access review programme. 2. Then we have to create an access review (here I have to assume 'access review control' = 'access review'). 3. Question says the "resource owners" should perform the review. Here the owners can be Group owner role. Therefore assignment should be to group owners. (I honestly thinks that the word "resource" was used just to confuse us)
as of today, 2021.03.28, access review programs and access review controls do not exists. Only access reviews exists.
Wrong. Programs exists under Home>Identity Governance>Programs. We use this regularly.
What if the review is for Applications??, the questions says anything about if the review is on Teams and Groups or Applications. Then, who is the owner?? The question is rubbish, like a lot of questions in the exam: ambiguous, mal formed and with thousands of interpretations. It's not a problem of trying to confuse, it's a problem of a stupid person formulating the questions for the exam.
I just took my exam on 25th Nov 2023 and I wasnt aware that this is an open book exam. I am not sure if this comment will be approved, but you can open Learn.microsoft.com during the exam and do your research for any question.
You just blew my mind
RAEALLY?, YOU WONT BE PENALISED FOR IT?
Open book not in the traditional sense. It's timed, proctored and the only resource is Microsoft Learn.....but that does help. Right now the test would be pretty difficult to pass without a resource as they are in process of making major changes.
https://techcommunity.microsoft.com/t5/microsoft-learn-blog/introducing-a-new-resource-for-all-role-based-microsoft/ba-p/3500870 That's Hilarious guys)))
this question is present in test today
1. Create program 2. Create control 3. Set reviewers to Group owners
Hey guys. I just created an access review and all I did was: 1_Create the Access review from Identity Governance (no longer on "Access Review" plus no onboarding needed) 2_ Set reviewers. Then off course I set up what happens with reviewees if reviewers don't respond, durations, etc, but no access review control
Answer is correct, Create program Create control Set reviewers to Group owners https://developer.microsoft.com/en-us/graph/blogs/retrieving-azure-ad-access-reviews/#:~:text=program%3A%20represents%20an%20Azure%20AD%20access%20review%20program.,AD%20access%20reviews%20has%20one%20program%2C%20%60Default%20program%60.
correct answer
Is this question up to date? I can't find any documentation about programs. The added links forword me to the documentation of access review, not programs. I saw in the Identity Governance the Program section. Is this still a recommended feature or near to the end of life?
I believe this is deprecated. I found a link to the Microsoft Graph API beta where it shows the Access Review Program and it's under the deprecated section. With the new api for Access Reviews as showing V2 in the url. https://docs.microsoft.com/en-us/graph/api/resources/program?view=graph-rest-beta
I was wrong this completely exists... If anyone else is looking for the location of this, it is found here - https://portal.azure.com/#blade/Microsoft_AAD_ERM/DashboardBlade/Programs There is basically no documentation on it but it is similar to Catalogs for access packages. Just a logical container for storing access reviews.
My brain is like mush from studying this exam. Apologies.
Damn why there are so many deprecated question on AZ-500? Az-104 was fine..
coz AZ-500 had never its number changed; AZ-104 is newer, AZ-305 is the sequel to AZ-300/301 (2018/2019) AZ-303/304 (2020/2021)... so should be a AZ-503 by now...
right answer
the second url in explanation is redirecting to the first one itself. here's another link https://www.rebeladmin.com/2019/03/step-step-guide-azure-ad-access-reviews-applications/
Is access review control still a thing or is it obsolete now?
Right ans.
The answer is correct
To configure an access review assigned to a new collection of reviews and reviewed by resource owners, you should perform the following three actions in sequence: Create an access review program Set Reviewers to selected users Set Reviewers to Group owners These actions ensure that an access review program is created, reviewers are specified as selected users, and the reviewers are set to the owners of the relevant groups.
Inside a program you need a Control.