Exam MS-900 topic 1 question 24 discussion

Answer is C. You cant configure or protect Admin accounts without Privileged Identity Management. Azure AD Identity Protection is for monitoring and protecting USER accounts not ADMIN accounts.

its either a typo here in the question or a catch question, there is no Microsoft Azure AD privilege identity protection, be aware of features and namings...

Guys some of the questions need to be updated as Microsoft has not only changed names but added new features. The answer is C. But the name is now Microsoft Entra Privileged Identity Manager (PIM) (PIM) is the feature that can protect high-privilege accounts like Global Administrators by utilizing dynamic risk profiles. It is part of the Entra ID security suite and helps manage, control, and monitor access to privileged roles within your environment. Key Features of PIM: Just-in-Time (JIT) Access: Allows Global Administrators to request elevated privileges when needed, with approval workflows in place. Dynamic Risk Profiles: PIM can evaluate risk factors dynamically based on user activity and conditions (e.g., geographic location or unusual sign-ins). If suspicious activity is detected, PIM can enforce additional security measures, such as multi-factor authentication (MFA) or just-in-time activation for global administrators.

C it should be PIM

pim is what requests authorization prior elevating your role

C for me too, people are mixing the two features and the given answer is simply wrong. People need to read the question again

Clearly is C, PIM is about APPROVING elevated roles, NOT Identity Protection !! (There is no approval in Identity Protection config)

Correct Answer: B Microsoft Azure AD Identity Protection. = Protection of roles. Microsoft Azure AD Privilege Identity Protection. = Just-in-time activate privileged role assignments. See Also: https://learn.microsoft.com/en-us/entra/id-protection/how-to-deploy-identity-protection

Para garantir que as funções administrativas estejam protegidas exigindo aprovações, você deve usar a "Proteção de Identidade do Microsoft Azure AD" (opção B). Essa é uma solução que ajuda a proteger as identidades e contas dos administradores, tornando o acesso mais seguro e garantindo a integridade das credenciais administrativas. A Proteção de Identidade do Microsoft Azure AD oferece recursos para proteger contra ameaças de segurança, como autenticação multifator, políticas de senha e verificações de identidade, que podem ser configuradas para exigir aprovações ou aprovações adicionais para atividades administrativas críticas.

PIM is the answer

The B is correct, Privileged Identity Management is for have admin right / roles for a specific time. https://learn.microsoft.com/en-us/answers/questions/127057/what-is-the-key-difference-between-priviledged-ide

Answer : C The only answer where it is possible to require approval is PIM. Seems a lot of people think it should be Conditional Access. Conditional Access is used to protect the login eg. MFA. But you cannot require approval.

The answer is B.

The answer is B.

Privileged Identity Management is the correct ans.

Conditional access doesn't have anything to do with approval. CA restricts. PIM approves

https://learn.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Azure AD Privileged Identity Management