You have three Azure subscriptions that are linked to a single Microsoft Entra tenant. You need to evaluate and remediate the risks associated with highly privileged accounts. The solution must…

Question

Options

• AGlobal Secure Access
• BPrivileged Identity Management (PIM)
• CMicrosoft Entra Permissions Management
• DMicrosoft Entra Verified ID

• A
  4% (1)
• B
  12% (3)
• C
  80% (20)
• D
  4% (1)

Explanation

Microsoft Entra Permissions Management is correct because it is specifically designed to discover, remediate, and monitor permission risks across multiple cloud environments (including Azure subscriptions), providing a unified view of overprivileged accounts and automated remediation recommendations - all from a single pane of glass, minimizing administrative effort across all three subscriptions.

Why the others are wrong:

• B. Privileged Identity Management (PIM) manages just-in-time access for known privileged roles but does not evaluate or discover unknown or excessive permissions across subscriptions in an automated risk-assessment manner.
• A. Global Secure Access is a network security solution focused on securing access to applications and internet traffic - it has nothing to do with evaluating privileged account risks.
• D. Microsoft Entra Verified ID is an identity verification/credentialing solution for issuing and validating digital credentials, not for managing or remediating privileged access risks.

Memory Tip: Think of Permissions Management = Permission AUDIT tool - it discovers who has what permissions and flags excessive ones across cloud subscriptions. If the question mentions evaluating, remediating, or multiple subscriptions/clouds, lean toward Entra Permissions Management over PIM (which is more about controlling when someone uses a role, not discovering risks).

No community discussion yet for this question.