ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-301 All Questions

View all questions & answers for the AZ-301 exam
Go to Exam

Exam AZ-301 topic 2 question 38 discussion

Actual exam question from Microsoft's AZ-301
Question #: 38
Topic #: 2
[All AZ-301 Questions]

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,
Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the
Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:
✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
✑ If the manager does not verify an access permission, automatically revoke that permission.
✑ Minimize development effort.
What should you recommend?

  • A. In Azure Active Directory (AD) Privileged Identity Management, create a custom role assignment for the Application1 resources
  • B. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet
  • C. Create an Azure Automation runbook that runs the Get-AzureRmRoleAssignment cmdlet
  • D. In Azure Active Directory (Azure AD), create an access review of Application1
Show Suggested Answer Hide Answer
Suggested Answer: D 🗳️
by Shankar at Sept. 3, 2019, 11:09 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
Rajuuu
Highly Voted 5 years, 2 months ago
D os correct..Access Review is used to revoke permission.
upvoted 8 times
...
Prash85
Highly Voted 5 years ago
Microsoft 365 E5 include P2. D is the correct ans...
upvoted 7 times
...
glam
Most Recent 4 years, 4 months ago
D. In Azure Active Directory (Azure AD), create an access review of Application1
upvoted 2 times
...
sanketshah
4 years, 6 months ago
D correct answer
upvoted 1 times
...
Kamal_SriLanka
4 years, 10 months ago
Answe is D
upvoted 1 times
...
gboyega
4 years, 11 months ago
Given Answer is Correct
upvoted 4 times
...
sammy811
5 years ago
B is the right answer - https://docs.microsoft.com/en-us/powershell/module/azuread/get-azureaduserapproleassignment?view=azureadps-2.0 - Option D require P2 license
upvoted 4 times
iselectkane321
5 years ago
Microsoft 365 E5 include aad p2
upvoted 5 times
...
...
mbelferagui
5 years, 1 month ago
D is the correct answer
upvoted 2 times
...
Frankyboy1uk
5 years, 1 month ago
Access Review requires P2
upvoted 4 times
...
djecak
5 years, 2 months ago
I think the answer is A, as only PIM can auto revoke access
upvoted 2 times
djecak
5 years, 2 months ago
I stand corrected, it's D based on: https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review#upon-completion-settings
upvoted 16 times
Ashish2021
4 years, 11 months ago
I agree. D is correct.
upvoted 2 times
...
...
...
pehe
5 years, 9 months ago
I believe that option B is overruled by Minimize development effort requirement
upvoted 5 times
...
Shankar
5 years, 10 months ago
Why option B is incorrect?
upvoted 1 times
tartar
4 years, 9 months ago
D is ok
upvoted 3 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel