Exam AZ-301 topic 2 question 18 discussion

Correct Answer is D. You can use the Privileged Identity Management (PIM) audit history to see all role assignments and activations within the past 30 days for all privileged roles. If you want to see the full audit history of activity in your Azure Active Directory (Azure AD) organization, including administrator, end user, and synchronization activity, you can use the Azure Active Directory security and activity reports.

Correct answer is D

D. Azure AD Privileged Identity Management (PIM)

D is correct answer

D is correct

B https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-activity-logs-azure-monitor D is wrong

PIM is correct. You can set an alert on PIM that shows a list of Administrators aren't using their privileged roles. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-configure-security-alerts?tabs=new Azure AD Sign In reports will give you a report of everyone who signed in to a registered application, but wil not show administrative accounts who have NOT been used.

PIM -> My Audit history Here you can generate a report and check who didn't logged in last 30 days. D is right.

D is the correct answer

it says "have NOT signed in", so the answer should be PIM Link: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-configure-security-alerts?tabs=new

Not entirely sure if D is correct. However I see sign-ins report can be generated from Azure AD. https://docs.microsoft.com/en-us/azure/active-directory/reports-monitoring/concept-sign-ins