ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 387 - AZ-104 discussion

Report
Export

You are configuring Azure Active Directory (AD) Privileged Identity Management.

You need to provide a user named Admm1 with read access to a resource group named RG1 for only one month.

The user role must be assigned immediately.

What should you do?

A.
Assign an active role.
Answers
A.
Assign an active role.
B.
Assign an eligible role.
Answers
B.
Assign an eligible role.
C.
Assign a permanently active role.
Answers
C.
Assign a permanently active role.
D.
Create a custom role and a conditional access policy.
Answers
D.
Create a custom role and a conditional access policy.
Suggested answer: B

Explanation:

Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then they complete an activation process and become an active admin for a predetermined amount of time.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pimconfigure

asked 26/09/2024
Barbara Bailey
42 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first