You have a multicloud environment that contains Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) subscriptions. You need to discover and review role assignments across the…

The correct answer is D. Microsoft Entra Permissions Management. Microsoft Entra Permissions Management is the only option in this list that natively supports multicloud environments-specifically Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)-for discovering and reviewing role assignments and permissions. It provides a…

Design security operations, identity, and compliance capabilities

Question

You have a multicloud environment that contains Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP) subscriptions. You need to discover and review role assignments across the subscriptions. What should you use?

Options

AAzure Lighthouse
BMicrosoft Defender for Identity
CMicrosoft Entra ID Governance
DMicrosoft Entra Permissions Management

How the community answered

(21 responses)

A
5% (1)
C
5% (1)
D
90% (19)

Explanation

Microsoft Entra Permissions Management is the only option in this list that natively supports multicloud environments-specifically Azure, Amazon Web Services (AWS), and Google Cloud Platform (GCP)-for discovering and reviewing role assignments and permissions. It provides a unified view of all identities and their entitlements across all three clouds, which is exactly what the question requires. Azure Lighthouse (A) is for managing multiple Azure tenants/subscriptions but does not cover AWS or GCP. Microsoft Defender for Identity (B) focuses on on-premises Active Directory and Azure AD threat detection, not multicloud role assignment discovery. Microsoft Entra ID Governance (C) manages identity lifecycle and access reviews but only within Azure AD/Microsoft 365 scope, not AWS or GCP.

Topics

#Multicloud IAM#Permissions Management#Microsoft Entra#CIEM

Community Discussion

No community discussion yet for this question.

Full SC-100 Practice