Exam AZ-101 topic 4 question 10 discussion

Actual exam question from Microsoft's AZ-101

Question #: 10
Topic #: 4

You are configuring Azure Active Directory (AD) Privileged Identity Management.
You need to provide a user named Admin1 with read access to a resource group named RG1 for only one month. The user role must be assigned immediately.
What should you do?

A. Assign an active role.
B. Assign an eligible role.
C. Assign a permanently active role.
D. Create a custom role and a conditional access policy.

Show Suggested Answer

Suggested Answer: B 🗳️
Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then they complete an activation process and become an active admin for a predetermined amount of time.
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

by AZ104GG at Sept. 18, 2021, 8:59 p.m.

Comments

Submit Cancel

Amir1909

1 year, 1 month ago

A is correct

upvoted 1 times

...

donner0219

2 years, 6 months ago

B. Assign an eligible role.

upvoted 1 times

...

AZ104GG

3 years, 6 months ago

Think is A

upvoted 2 times

Superego

1 year, 3 months ago

Agree. A. Assign an active role. In https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-configure#terminology - eligible: A role assignment that requires a user to perform one or more actions to use the role - active: The role assignment should be effective immediately. As required by the question "The user role must be assigned immediately." For active role it can restrict the valid period which matches the need "...for only one month".

upvoted 1 times

...

Exam AZ-101 All Questions

View all questions & answers for the AZ-101 exam

Exam AZ-101 topic 4 question 10 discussion

Comments

Amir1909

donner0219

AZ104GG

Superego

SY0-701