Describe the capabilities of Microsoft Entra →hardMultiple Choice

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Refer to the exhibit.

```json
{
  "roleEligibilityScheduleRequests": [
    {
      "roleDefinitionId": "62e90394-69f5-4237-9190-012177145e10",
      "principalId": "a1b2c3d4-e5f6-7890-abcd-ef1234567890",
      "scheduleInfo": {
        "startDateTime": "2026-04-01T00:00:00Z",
        "expiration": {
          "type": "AfterDuration",
          "duration": "PT8H"
        }
      },
      "ticketInfo": {
        "ticketNumber": "INC-12345"
      }
    }
  ]
}

You are analyzing a PIM activation request. The roleDefinitionId corresponds to the Global Administrator role. What is the duration of the activation?

⚠ Common exam trap

Watch out — candidates often confuse the *default* activation duration for PIM roles (4 hours) with the *maximum allowed* duration (8 hours), or the 8-minute activation window for temporary access passes, leading them to select the wrong option. For highly privileged roles like Global Administrator, while 8 hours is the maximum and often configured, the system default is 4 hours.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

4 hours

By default, the activation duration for a PIM role is 4 hours. While the maximum allowed activation duration for any role, including Global Administrator, is 8 hours, the system's default setting is 4 hours if no custom configuration is applied. Highly privileged roles like Global Administrator are often configured with an 8-hour maximum by organizations, but the system default is 4 hours.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
4 hours
Why this is correct
The ISO 8601 duration string "PT8H" explicitly defines an eight-hour period for role activation. Therefore, interpreting this as 4 hours is an incorrect reading of the specified duration. Microsoft Entra PIM relies on precise time definitions to enforce Just-In-Time access, and any deviation from the configured "PT8H" value would contradict the role's maximum activation setting.
✗
8 hours
Why it's wrong here
The "PT8H" format precisely adheres to the ISO 8601 duration standard, where 'P' denotes a period, 'T' indicates the time component, and '8H' specifically signifies eight hours. When a PIM role definition or activation request specifies "PT8H", it directly translates to a maximum activation duration of eight hours, making this the accurate interpretation of the given time string.
✗
8 minutes
Why it's wrong here
The 'H' in the ISO 8601 duration string "PT8H" unequivocally stands for 'hours', not 'minutes'. If the intended duration were 8 minutes, the correct ISO 8601 representation would be "PT8M", with 'M' denoting minutes. Misinterpreting 'H' as minutes would drastically shorten the privileged access period, potentially hindering necessary administrative tasks and violating the configured policy.
✗
8 days
Why it's wrong here
The ISO 8601 duration "PT8H" specifies a time component of 8 hours, clearly indicated by the 'H' for hours. For a duration of 8 days, the correct ISO 8601 format would typically be "P8D" (Period 8 Days), where 'D' explicitly denotes days. The absence of a 'D' component and the explicit presence of 'H' in the given string confirm that the duration is in hours, not days.

Go deeper

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question