Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Which Azure Active Directory (Azure AD) feature can you use to evaluate group membership and automatically remove users that no longer require membership in a group?
Suggested Answer:A🗳️
Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
A is correct. But the description offered is not fully adequate for what access reviews do: there is no capability to AUTOMATICALLY remove user access rights. The whole point of (manual user-driven) access reviews is that in some cases automation isn't possible. (See the link already provided here: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview)
Why there is no "dynamics groups" in the option ? I think it's an error :
Dynamic groups are used to automate the management of Azure Active Directory (AAD) group membership. They allow you to define rules to automatically add or remove users from a group based on certain criteria such as their job title or department.
Access reviews, on the other hand, are used to periodically review the access permissions of users to Azure resources. They allow you to identify and revoke unnecessary access, ensuring that only the right people have the right level of access to your resources. Access reviews can be done on role assignments, group memberships, and application assignments.
In summary, Dynamic groups are used to automatically manage group membership in AAD, while access reviews are used to periodically review and revoke unnecessary access to Azure resources, so here it must be Dynamic Groups or maybe I'm wrong ?
You're overthinking it. The key word in this question is "evaluate". You are given the option to set up recurring reviews and apply the decisions "automatically".
Check out this video and look at the slide around the 1:30 mark.
https://youtu.be/kDRjQQ22Wkk
A is correct, When the review is complete, access reviews can be set to manually or automatically remove access from the group membership or application assignment except for a dynamic group or originates from on-premises AD.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Melwin86
Highly Voted 2 years, 10 months ago[Removed]
Highly Voted 2 years, 1 month agoPC75
Most Recent 6 months, 3 weeks agoRahulX
8 months, 1 week agomanofsteel9
11 months, 2 weeks agonobrainatall
1 year, 2 months agoWhyiest
1 year, 3 months agoBarbados
1 year, 3 months agoLizzylizzy
1 year, 4 months agodd9396
1 year, 5 months agoInformacionFalsa
1 year, 5 months agomitchduck
1 year, 5 months agoLone__Wolf
1 year, 6 months agoabilioneto
1 year, 7 months agoZeus009
1 year, 8 months agocantbeme
1 year, 8 months agoAbhiIAM
1 year, 9 months agocormorant
1 year, 10 months ago