SC-900 · Question #5
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
The correct answer is A. Microsoft Entra Privileged Identity Management (PIM). Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide…
Question
What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
Options
- AMicrosoft Entra Privileged Identity Management (PIM)
- BAzure Multi-Factor Authentication (MFA)
- CMicrosoft Entra ID Protection
- Dconditional access policies
How the community answered
(43 responses)- A93% (40)
- B2% (1)
- D5% (2)
Explanation
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-
Topics
Community Discussion
No community discussion yet for this question.