StudyByteLearn
← AZ-305: Azure Infrastructure Solutions
AZ-305 · Governance and compliance

Practice question 101 of 400 · hard

A user activates an eligible subscription Owner assignment through PIM for one hour. Which risk remains during that hour?

Choose the single best answer.

  1. A.MFA makes every privileged action compliant with all resource policies.
  2. B.PIM automatically converts Owner into read-only access.
  3. C.The active role still grants its full permissions at the assigned scope, so role and scope must be appropriate.
  4. D.Eligibility review is unnecessary because an activation expires.
Show the answer and explanation

✓ Correct answer

  • The active role still grants its full permissions at the assigned scope, so role and scope must be appropriate.

PIM reduces duration of privilege, not the active role's permission set. Scope, role selection, monitoring, and eligibility reviews still matter. MFA improves sign-in assurance but does not make all actions compliant or remove applicable policy constraints. Source: AZ-305 Study Guide.pdf, PDF page(s) 21.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.