AZ-305 · Question 11 · Domain 1.2: Authentication and Authorization
You are designing a privileged access strategy for your Azure environment.
Currently, 15 administrators have permanent 'Owner' role assignments on the root Management Group. This violates the principle of least privilege. You need to design a solution using Microsoft Entra Privileged Identity Management (PIM) to secure these administrative roles.
Which THREE configurations should you include in your PIM design? (Select THREE)
Answer options:
Require justification on activation.
Require MFA on activation.
Configure eligible assignments instead of active assignments.
Create a Conditional Access policy to block access to the Azure Portal.
Assign the 'Owner' role to a Service Principal instead of users.
Configure Azure AD Identity Protection to require password resets daily.
55 questions · hints · full answers · grading
Expert