SC-900 · Question #8
Which Microsoft Entra ID feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?
The correct answer is A. access reviews. Microsoft Entra ID Access Reviews allow administrators (or designated reviewers) to periodically evaluate whether users still need membership in a group, access to an application, or a privileged role. They can be configured to automatically remove users when reviewers don't…
Question
Which Microsoft Entra ID feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?
Options
- Aaccess reviews
- Bmanaged identities
- Cconditional access policies
- DMicrosoft Entra ID Protection
How the community answered
(13 responses)- A85% (11)
- B8% (1)
- C8% (1)
Explanation
Microsoft Entra ID Access Reviews allow administrators (or designated reviewers) to periodically evaluate whether users still need membership in a group, access to an application, or a privileged role. They can be configured to automatically remove users when reviewers don't respond or when the review decision denies continued access. This directly addresses the requirement to identify and remove stale group members. Managed identities (B) provide Azure resources with an identity to authenticate to services - not group membership management. Conditional access policies (C) control sign-in conditions, not group membership. Entra ID Protection (D) detects risky sign-ins and user compromise but does not evaluate or remove group memberships.
Topics
Community Discussion
No community discussion yet for this question.