nerdexam
Microsoft

AZ-305 · Question #16

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest…

The correct answer is C. Create an access review. Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access…

Submitted by devops_kid· Mar 6, 2026Implement security

Question

You have an Azure Active Directory (Azure AD) tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned membership. Group1 has 50 members, including 20 guest users. You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements: - The evaluation must be repeated automatically every three months. - Every member must be able to report whether they need to be in Group1. - Users who report that they do not need to be in Group1 must be removed from Group1 automatically. - Users who do not report whether they need to be in Group1 must be removed from Group1 automatically. What should you include in the recommendation?

Options

  • AImplement Azure AD Identity Protection.
  • BChange the Membership type of Group1 to Dynamic User.
  • CCreate an access review.
  • DImplement Azure AD Privileged Identity Management (PIM).

How the community answered

(45 responses)
  • A
    4% (2)
  • B
    4% (2)
  • C
    78% (35)
  • D
    13% (6)

Explanation

Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access. https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

Topics

#access reviews#group membership#identity governance#automated removal

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-305 Practice