A service still permits access through an already issued token after a user is disabled. The team assumed every application supports immediate continuous access reevaluation. What should be done?

Choose the single best answer.

A.Assume account disablement makes every token instantly invalid in every application
B.Revoke only the user's role eligibility while ignoring active application sessions
C.Reduce future sign-in frequency without testing the already issued session
D.Validate the application's supported token and revocation behavior and design appropriate containment

Show the answer and explanation

✓ Correct answer

Validate the application's supported token and revocation behavior and design appropriate containment

Supported client/resource and session behavior must be tested. Disablement is not universal instant revocation, future sign-in frequency alone does not establish termination of an existing session, and role eligibility removal does not prove all active tokens are revoked.

Read the source reference

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study material. Not affiliated with or endorsed by Microsoft. These are original learning questions, not actual exam questions. Product capabilities and exam objectives can change; verify current Microsoft documentation. Practice scores do not predict or guarantee an exam result.