Exam AZ-304 topic 2 question 57 discussion

Incorrect, @Getulio is right. The answer is a PowerShell script that runs on activity logs. PIM will tell you role creation dates etc. but it doesn't tell you who hasn't logged on for the last 30 days.

Access Review is part of PAM, not PIM.

Ok final answer - PIM access reviews. https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-create-azure-ad-roles-and-resource-roles-review "The need for access to privileged Azure resource and Azure AD roles by employees changes over time. To reduce the risk associated with stale role assignments, you should regularly review access. You can use Azure Active Directory (Azure AD) Privileged Identity Management (PIM) to create access reviews for privileged access to Azure resource and Azure AD roles." https://docs.microsoft.com/en-us/azure/active-directory/governance/create-access-review "In the Enable review decision helpers section, choose whether you want your reviewer to receive recommendations during the review process. When enabled, users who have signed in during the previous 30-day period are recommended for approval. Users who haven't signed in during the past 30 days are recommended for denial."

You are right, it won't generate a list of "not signed in for past 30days" However ,the question is "recommend a solution to identify" So, you can use PIM can identify the admin XXX is not on the list of past 30 days sign-in history. All in all, the question did highlight 30days, which matched with the PIM audit history duration.