You have an Azure subscription.
You enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
Your company’s security policy for administrator accounts has the following conditions:
The accounts must use multi-factor authentication (MFA).
The accounts must use 20-character complex passwords.
The passwords must be changed every 180 days.
The accounts must be managed by using PIM.
You receive multiple alerts about administrators who have not changed their password during the last 90 days.
You need to minimize the number of generated alerts.
Which PIM alert should you modify?

Question

You have an Azure subscription.You enable Azure Active Directory (Azure AD) Privileged Identity Management (PIM).Your company’s security policy for administrator accounts has the following conditions:The accounts must use multi-factor authentication (MFA).The accounts must use 20-character complex passwords.The passwords must be changed every 180 days.The accounts must be managed by using PIM.You receive multiple alerts about administrators who have not changed their password during the last 90 days.You need to minimize the number of generated alerts.Which PIM alert should you modify?

Robert Calderon · Accepted Answer

Potential stale accounts in a privileged role

Robert Calderon · Answer

Roles are being assigned outside of Privileged Identity Management

Robert Calderon · Answer

Roles don't require multi-factor authentication for activation

Robert Calderon · Answer

Administrators aren't using their privileged roles

Question list

List of questions

Question 1

(0)

Question 2

(0)

Question 3

(0)

Question 4

(0)

Question 5

(0)

Question 6

(0)

Question 7

(0)

Question 8

(0)

Question 9

(0)

Question 10

(0)

Related questions

Question 182 - AZ-500 discussion

Suggested answer: D

0 comments