A company wants to require stronger sign-in assurance for administrators based on application, device state, and location. Which solution should it recommend?

Choose the single best answer.

A.Grant only narrower Azure resource roles and omit all device/location sign-in conditions.
B.Deploy PIM eligibility alone and assume it enforces every targeted application's device and location requirements.
C.Use Conditional Access with appropriate controls and staged rollout.
D.Apply an Azure allowed-locations policy and assume it evaluates the administrator's sign-in location.

Show the answer and explanation

✓ Correct answer

Use Conditional Access with appropriate controls and staged rollout.

Conditional Access evaluates supported sign-in signals and applies the required authentication conditions. Azure resource roles authorize operations, and allowed-locations Policy governs resource deployment rather than the user's sign-in location. PIM reduces standing privilege but does not replace targeted sign-in conditions. Source: AZ-305 Study Guide.pdf, PDF page(s) 14.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.