ExpertAZ-305 · Question 11 · Domain 1.2: Authentication and Authorization
You are designing a privileged access strategy for your Azure environment.
Currently, 15 administrators have permanent 'Owner' role assignments on the root Management Group. This violates the principle of least privilege. You need to design a solution using Microsoft Entra Privileged Identity Management (PIM) to secure these administrative roles.
Which THREE configurations should you include in your PIM design? (Select THREE)
You are designing a privileged access strategy for your Azure environment.
Currently, 15 administrators have permanent 'Owner' role assignments on the root Management Group. This violates the principle of least privilege. You need to design a solution using Microsoft Entra Privileged Identity Management (PIM) to secure these administrative roles.
Which THREE configurations should you include in your PIM design? (Select THREE)
Answer options:
Require justification on activation.
Require MFA on activation.
Configure eligible assignments instead of active assignments.
Create a Conditional Access policy to block access to the Azure Portal.
Assign the 'Owner' role to a Service Principal instead of users.
Configure Azure AD Identity Protection to require password resets daily.
How to approach this question
Full Answer
Common mistakes
Practice the full Azure Solutions Architect Expert AZ-305 Practice Exam 4
55 questions · hints · full answers · grading