nerdexam
Microsoft

SC-900 · Question #102

You have an Azure subscription. You need to implement approval-based, time-bound role activation. What should you use?

The correct answer is D. Microsoft Entra Privileged Identity Management (PIM). Microsoft Entra Privileged Identity Management (PIM) is designed specifically for implementing approval-based, time-bound role activation in an Azure subscription. PIM allows you to manage and control access to privileged roles in Microsoft Entra ID, Azure resources, and…

Submitted by kwame.gh· Apr 18, 2026Describe the capabilities of Microsoft Entra ID

Question

You have an Azure subscription. You need to implement approval-based, time-bound role activation. What should you use?

Options

  • AWindows Hello for Business
  • BMicrosoft Entra ID Protection
  • CMicrosoft Entra Access Reviews
  • DMicrosoft Entra Privileged Identity Management (PIM)

How the community answered

(54 responses)
  • A
    4% (2)
  • B
    2% (1)
  • C
    2% (1)
  • D
    93% (50)

Explanation

Microsoft Entra Privileged Identity Management (PIM) is designed specifically for implementing approval-based, time-bound role activation in an Azure subscription. PIM allows you to manage and control access to privileged roles in Microsoft Entra ID, Azure resources, and Microsoft Entra- integrated SaaS apps. It enables you to elevate access on a just-in-time basis and provides an approval workflow for role activation, which can be restricted to specific time periods. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-

Topics

#Privileged Identity Management#Role activation#Just-in-Time access#Microsoft Entra ID

Community Discussion

No community discussion yet for this question.

Full SC-900 Practice