You have a Microsoft 365 subscription that contains more than 2,000 guest users. You need to ensure that when guest users are added to Microsoft 365 groups in the subscription, their membership is…

The correct answer is C. access reviews. Azure AD Access Reviews are specifically designed to periodically validate whether users (including guests) should retain their membership in groups, access to applications, or role assignments. You can configure an access review to run on a recurring schedule (e.g., every 30…

Submitted by parkjh· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 subscription that contains more than 2,000 guest users. You need to ensure that when guest users are added to Microsoft 365 groups in the subscription, their membership is validated by the group owner every 30 days. What should you configure?

Options

Agroup expiration policies
Bretention policies
Caccess reviews
DConditional Access policies

How the community answered

(54 responses)

A
6% (3)
B
4% (2)
C
80% (43)
D
11% (6)

Explanation

Azure AD Access Reviews are specifically designed to periodically validate whether users (including guests) should retain their membership in groups, access to applications, or role assignments. You can configure an access review to run on a recurring schedule (e.g., every 30 days), target guest users in Microsoft 365 groups, and designate the group owner as the reviewer who must approve or deny each member's continued access. Group expiration policies (A) automatically delete inactive groups after a set period - they do not review individual member eligibility. Retention policies (B) preserve content for compliance purposes. Conditional Access policies (D) control the conditions under which users can authenticate and access resources, not group membership validation.

Topics

#Access reviews#Guest users#Microsoft 365 Groups#Identity governance

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice