Exam AZ-304 topic 2 question 21 discussion

Correct

QA section confused a little, but it's correct: "Provide just-in-time privileged access to Azure AD and Azure resources" https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure#what-does-it-do

The first box is wrong, Security team needs access review and that only comes with the Azure AD P2 tier which is the identity protection

Was on the AZ-305 exam - 5.7.22

Security: PIM Development: Mange identity Quality Assurance: PIM

Answer is correct

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure#what-does-it-do Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment 1st and 3rd drop downs are PIM "access Key Vault" -> This would be Managed Identity for 2nd drop down

Came in exam on 20-sep-21, i passed, answers are correct

correct

Yes! We all finally agree on this one! Security: PIM Development: Mange identity Quality Assurance: PIM

Answer is Correct!!

Correct answers!

Correct

Azure AD Privileged Identity Management Azure Managed Service identities Azure AD Privileged Identity Management

100% correct answer

Right ans.

Correct