Exam AZ-304 All Questions

View all questions & answers for the AZ-304 exam

Exam AZ-304 topic 2 question 21 discussion

Actual exam question from Microsoft's AZ-304

Question #: 21
Topic #: 2

HOTSPOT -
Your organization has developed and deployed several Azure App Service Web and API applications. The applications use Azure Key Vault to store several authentication, storage account, and data encryption keys. Several departments have the following requests to support the applications:

You need to recommend the appropriate Azure service for each department request.
What should you recommend? To answer, configure the appropriate options in the dialog box in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer

Suggested Answer:

by mmmore at Dec. 3, 2020, 7:58 p.m.

Comments

Submit Cancel

mmmore

Highly Voted 4 years, 8 months ago

Correct

upvoted 66 times

QiangQiang

4 years, 3 months ago

The first one should be Azure AD Identity Protection to create an access review

upvoted 8 times

QiangQiang

4 years, 3 months ago

never mind, it's Azure AD Identity Governance that covers access review, Not ID Protection. my bad

upvoted 16 times

...

Lexa

Highly Voted 4 years, 7 months ago

QA section confused a little, but it's correct: "Provide just-in-time privileged access to Azure AD and Azure resources" https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure#what-does-it-do

upvoted 18 times

dandirindan

4 years, 6 months ago

great comment on jit access,

upvoted 4 times

...

Azure_daemon

Most Recent 3 years, 3 months ago

The first box is wrong, Security team needs access review and that only comes with the Azure AD P2 tier which is the identity protection

upvoted 3 times

...

cwilson91

3 years, 3 months ago

Was on the AZ-305 exam - 5.7.22

upvoted 5 times

...

plmmsg

3 years, 5 months ago

Security: PIM Development: Mange identity Quality Assurance: PIM

upvoted 3 times

...

moon2351

3 years, 6 months ago

Answer is correct

upvoted 2 times

...

syu31svc

3 years, 10 months ago

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure#what-does-it-do Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment 1st and 3rd drop downs are PIM "access Key Vault" -> This would be Managed Identity for 2nd drop down

upvoted 7 times

...

nkv

3 years, 10 months ago

Came in exam on 20-sep-21, i passed, answers are correct

upvoted 4 times

cfsxtuv33

3 years, 9 months ago

The answers are correct. The only issue I have is that you comment on quite a few questions as if you remember each and every one that was on your test. I'm not buying it for a second.

upvoted 8 times