A company is evaluating Microsoft 365. You need to identify concepts of using the principle of least privilege. Which two concepts should you identify? Each correct answer presents a complete…

Just-in-time (JIT) access is a direct implementation of least privilege by granting elevated permissions only when needed and for a limited duration, reducing the attack surface from standing privileges - this is a foundational concept in Microsoft's Zero Trust and Privileged Identity Management (PIM) model.

Just-enough-access (JEA) directly embodies least privilege by ensuring users and accounts are granted only the specific permissions required to perform their role, nothing more, preventing over-provisioning and limiting the blast radius of compromised accounts.

Azure AD Multifactor Authentication is an identity verification and authentication strength control, not a mechanism for limiting the scope or duration of access permissions as defined by least privilege.

Blocking legacy authentication addresses a security vulnerability related to authentication protocols that cannot support modern MFA, which is a security hardening measure but not a concept of least privilege access scoping.