Exam AZ-305 topic 1 question 1 discussion

Actual exam question from Microsoft's AZ-305

Question #: 1
Topic #: 1

You have an Azure subscription that contains a custom application named Application1. Application1 was developed by an external company named Fabrikam,
Ltd. Developers at Fabrikam were assigned role-based access control (RBAC) permissions to the Application1 components. All users are licensed for the
Microsoft 365 E5 plan.
You need to recommend a solution to verify whether the Fabrikam developers still require permissions to Application1. The solution must meet the following requirements:
✑ To the manager of the developers, send a monthly email message that lists the access permissions to Application1.
✑ If the manager does not verify an access permission, automatically revoke that permission.
✑ Minimize development effort.
What should you recommend?

A. In Azure Active Directory (Azure AD), create an access review of Application1.
B. Create an Azure Automation runbook that runs the Get-AzRoleAssignment cmdlet.
C. In Azure Active Directory (Azure AD) Privileged Identity Management, create a custom role assignment for the Application1 resources.
D. Create an Azure Automation runbook that runs the Get-AzureADUserAppRoleAssignment cmdlet.

Show Suggested Answer

Suggested Answer: A 🗳️

by Eltooth at Dec. 10, 2021, 5:18 a.m.

Comments

Submit Cancel

NotMeAnyWay

Highly Voted 8 months ago

Selected Answer: A

Here's why: An access review is a feature in Azure AD that enables an administrator to review the membership of a group or application role to ensure that only the right people have continued access. This aligns with the requirement to verify access permissions to Application1. Access reviews can be scheduled to run on a regular basis and can be configured to send email notifications to reviewers. This satisfies the requirement to send a monthly email message to the manager of the developers listing the access permissions to Application1. Access reviews also provide the option to automatically revoke access if the reviewer does not verify an access permission, which fulfills the requirement to automatically revoke permissions if the manager does not verify them. Implementing an access review in Azure AD requires minimal development effort and can be set up through the Azure portal with a few simple clicks.

upvoted 17 times

...

1 year, 8 months ago

Access review is the correct answer

upvoted 2 times

...

2 years, 2 months ago

A is correct

upvoted 1 times

...

jj22222

2 years, 2 months ago

Selected Answer: A

a because its right

upvoted 1 times

...

zellck

2 years, 3 months ago

Selected Answer: A

A is the answer. https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview Access reviews in Azure Active Directory (Azure AD), part of Microsoft Entra, enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed regularly to make sure only the right people have continued access

upvoted 4 times

zellck

2 years, 3 months ago

https://learn.microsoft.com/en-us/training/modules/design-authentication-authorization-solutions/8-design-for-access-reviews To ensure employees and users always have the correct access, you can perform an access review. An Azure Active Directory access review is a planned review of the access needs, rights, and history of user access.

upvoted 3 times

...

Kamal4u85

2 years, 3 months ago

A is correct

upvoted 1 times

...

Load full discussion...