Administrators should obtain elevated Azure permissions only when necessary, with time-limited activation and configured approval/MFA. What should be recommended?

Choose the single best answer.

A.Require Conditional Access MFA but leave the same permanent active privileged roles in place.
B.Use PIM eligibility with appropriate activation controls.
C.Keep all administrators permanently active as Owner and periodically review the standing assignments.
D.Grant an expiring access package while assuming it supplies all supported PIM role-activation controls.

Show the answer and explanation

✓ Correct answer

Use PIM eligibility with appropriate activation controls.

PIM eligibility and configured activation controls reduce standing privileged duration. Permanent Owner remains standing privilege even with reviews or MFA. Access packages govern approved access bundles and policies rather than replacing all PIM activation mechanics. Source: AZ-305 Study Guide.pdf, PDF page(s) 21.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.