ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam
Go to Exam

Exam AZ-305 topic 1 question 42 discussion

Actual exam question from Microsoft's AZ-305
Question #: 42
Topic #: 1
[All AZ-305 Questions]

You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.

You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:

• The evaluation must be repeated automatically every three months.
• Every member must be able to report whether they need to be in Group1.
• Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
• Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.

What should you include in the recommendation?

  • A. Implement Azure AD Identity Protection.
  • B. Change the Membership type of Group1 to Dynamic User.
  • C. Create an access review.
  • D. Implement Azure AD Privileged Identity Management (PIM).
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️
by IRISone at Jan. 16, 2023, 11:46 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
darthfodio
Highly Voted 2 years, 6 months ago
Selected Answer: C
Based on the requirements below: The evaluation must be repeated automatically every three months. • Every member must be able to report whether they need to be in Group1. • Users who report that they do not need to be in Group1 must be removed from Group1 automatically. • Users who do not report whether they need to be in Group1 must be removed from Group1 automatically. The correct answer should be - C. Create an access. review. https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 40 times
...
GuyForget
Highly Voted 2 years, 2 months ago
How is this a legit question? The clear answer should be to configure an Access Review, but this is configured through PIM, so would they mark both C & D correct?
upvoted 6 times
AdventureChick
1 year, 11 months ago
It's always "choose the BEST answer based on the scenario". Setting up an Access Review is required in order to meet the criteria. Best Answer. Period. Full stop. Yes, Access Review is part of PIM, but PIM by itself doesn't meet the criteria (i.e. you could have PIM and say "screw that Access Review thing"). I have a bunch of MS certs, and regardless of the test, they give you a lot of questions where you can't decided between 2 answers because both are "sort of right depending on how you look at it". Those answers? It's always some little detail in the scenario that decides the Best answer. In this question, they are testing if you know the difference between PIM & Access Control. Someone who skims through material might remember PIM = reporting and not get in deep enough to know what Access Control is. There is method to their madness ... even if it bugs the crap out of us.
upvoted 21 times
...
...
salned
Most Recent 11 months, 1 week ago
Selected Answer: C
Access review for the needed of automation
upvoted 1 times
...
Nigromante
1 year, 4 months ago
C is the correct answer!
upvoted 1 times
...
Fidel_104
1 year, 4 months ago
Selected Answer: C
Present on today's exam (04/2024)
upvoted 5 times
...
andersonslls
1 year, 6 months ago
C for sure
upvoted 1 times
...
pmanglaviti
1 year, 6 months ago
Selected Answer: C
PIM is inadequate to complete the questions requirements. An Access review is the MORE right answer. C = Access Review. Change it already!
upvoted 1 times
...
azim1
1 year, 7 months ago
Selected Answer: D
Definitely D
upvoted 1 times
azim1
1 year, 7 months ago
Sorry, I meant C. Examtopics wont allow to modify comments.
upvoted 1 times
...
...
Rajkumar082021
1 year, 7 months ago
C is the correct answer
upvoted 2 times
...
Tplenty
1 year, 8 months ago
This is the same question in question 4, the answer is to Create an access review
upvoted 2 times
...
MeisAdriano
1 year, 9 months ago
Selected Answer: C
"Every three month"... that's access review
upvoted 1 times
...
dimipap3
1 year, 9 months ago
Selected Answer: C
That's literally the definition of access review
upvoted 2 times
...
123exam
1 year, 10 months ago
Selected Answer: C
https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 2 times
...
zarko
1 year, 10 months ago
Selected Answer: C
repeated every x time = access reviews
upvoted 2 times
...
BigShot0
1 year, 10 months ago
Selected Answer: C
Access reviews
upvoted 3 times
...
iGhostEverywhere
1 year, 10 months ago
Answer is C This is 100% an access review - PIM doesn't create reports nor is it replicable.
upvoted 2 times
...
Arun_U
1 year, 11 months ago
Selected Answer: C
The correct answer is C. Create an access review. An access review is a feature in Azure AD that allows you to periodically evaluate the membership of groups and applications. You can configure access reviews to run automatically and to send notifications to users who need to take action.
upvoted 1 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel