nerdexam
Microsoft

AZ-305 · Question #13

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned…

The correct answer is A. In Azure Active Directory (Azure AD), create an access review of Application1. Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access…

Submitted by sofia.br· Mar 6, 2026Implement security

Question

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam, Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the Microsoft 365 E5 plan. You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements: To the manager of the developers, send a monthly email message that lists the access permissions to Application1. If the manager does not verify an access permission, automatically revoke that permission. Minimize development effort. What should you recommend?

Options

  • AIn Azure Active Directory (Azure AD), create an access review of Application1.
  • BCreate an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
  • CIn Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role
  • DCreate an Azure Automation runbook that runs the

How the community answered

(47 responses)
  • A
    74% (35)
  • B
    6% (3)
  • C
    4% (2)
  • D
    15% (7)

Explanation

Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access. Have reviews recur periodically: You can set up recurring access reviews of users at set frequencies such as weekly, monthly, quarterly or annually, and the reviewers will be notified at the start of each review. Reviewers can approve or deny access with a friendly interface and with the help of smart recommendations. Why are access reviews important? "Azure AD enables you to collaborate with users from inside your organization and with external users. Users can join groups, invite guests, connect to cloud apps, and work remotely from their work or personal devices. The convenience of using self-service has led to a need for better access management capabilities." https://docs.microsoft.com/en-us/azure/active-directory/governance/manage-user-access-with-

Topics

#Azure AD access reviews#identity governance#RBAC permissions#external access

Community Discussion

No community discussion yet for this question.

Full AZ-305 Practice