ExpertMedium1 markMultiple Choice
AZ-305 · Question 06 · Domain 1.2: Authentication and Authorization
You are designing an identity governance solution for a large enterprise using Microsoft Entra ID (Azure AD).
The security team requires that any user attempting to access the Azure Portal to perform administrative tasks must:
- Be prompted for Multi-Factor Authentication (MFA).
- Provide a business justification.
- Have their access automatically revoked after 4 hours.
Which combination of services should you implement?
You are designing an identity governance solution for a large enterprise using Microsoft Entra ID (Azure AD).
The security team requires that any user attempting to access the Azure Portal to perform administrative tasks must:
- Be prompted for Multi-Factor Authentication (MFA).
- Provide a business justification.
- Have their access automatically revoked after 4 hours.
Which combination of services should you implement?
Answer options:
A.
Conditional Access and Azure AD Identity Protection
B.
Privileged Identity Management (PIM) and Conditional Access
C.
Azure AD Access Reviews and Conditional Access
D.
Azure AD B2B and Privileged Identity Management (PIM)
How to approach this question
Match the requirements to the specific capabilities of Entra ID features: time-bound/justification = PIM; MFA enforcement = Conditional Access.
Full Answer
B.Privileged Identity Management (PIM) and Conditional Access✓ Correct
Privileged Identity Management (PIM) provides Just-In-Time (JIT) privileged access to Azure AD and Azure resources. It supports requiring a justification and setting a maximum activation duration (e.g., 4 hours). Conditional Access is used to enforce Multi-Factor Authentication (MFA) when the user attempts to access the Azure Portal.
Common mistakes
Confusing Identity Protection with PIM. Identity Protection is for risk-based policies (e.g., leaked credentials), not JIT access.
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 2
55 questions · hints · full answers · grading
More questions from this exam
Q01Fabrikam Inc. is a global financial services company with 200 Azure subscriptions managed via a c...HardQ02A healthcare organization has 500 on-premises Windows Server VMs and 300 Azure VMs. They are impl...HardQ03You are designing a security monitoring solution using Microsoft Sentinel.
The compliance depar...EasyQ04Your company has a microservices application deployed across multiple Azure App Service instances...MediumQ05A defense contractor is migrating to Microsoft 365 and Azure. They have a strict security policy ...Hard