Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.
Mail Us [email protected]
Menu

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.
Microsoft Discussions

Exam AZ-101 topic 4 question 10 discussion

Actual exam question from Microsoft's AZ-101
Question #: 10
Topic #: 4
[All AZ-101 Questions]

You are configuring Azure Active Directory (AD) Privileged Identity Management.
You need to provide a user named Admin1 with read access to a resource group named RG1 for only one month. The user role must be assigned immediately.
What should you do?

  • A. Assign an active role.
  • B. Assign an eligible role.
  • C. Assign a permanently active role.
  • D. Create a custom role and a conditional access policy.
Show Suggested Answer Hide Answer
Suggested Answer: B 🗳️
Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then they complete an activation process and become an active admin for a predetermined amount of time.
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
by AZ104GG at Sept. 18, 2021, 8:59 p.m.

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
Submit Cancel
Amir1909
2 months, 1 week ago
A is correct
upvoted 1 times
...
donner0219
1 year, 7 months ago
B. Assign an eligible role.
upvoted 1 times
...
AZ104GG
2 years, 7 months ago
Think is A
upvoted 2 times
Superego
5 months ago
Agree. A. Assign an active role. In https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure#terminology - eligible: A role assignment that requires a user to perform one or more actions to use the role - active: The role assignment should be effective immediately. As required by the question "The user role must be assigned immediately." For active role it can restrict the valid period which matches the need "...for only one month".
upvoted 1 times
...
...

Get IT Certification

Unlock free, top-quality video courses on ExamTopics with a simple registration. Elevate your learning journey with our expertly curated content. Register now to access a diverse range of educational resources designed for your success. Start learning today with ExamTopics!

Start Learning for free
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel