Provided answer is wrong. Should be A.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management:
Provide just-in-time privileged access to Azure AD and Azure resources
Assign time-bound access to resources using start and end dates
Require approval to activate privileged roles
Enforce multi-factor authentication to activate any role
Use justification to understand why users activate
Get notifications when privileged roles are activated
Conduct access reviews to ensure users still need roles
Download audit history for internal or external audit
Prevents removal of the last active Global Administrator role assignment
Should be A.
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about.
Answer A, PIM relates to the Azure tasks
C seemsINcorrect becasue it saids POLICY, not control
https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-session
Conditional Access App Control enables user app access and sessions to be monitored and controlled in real time based on access and session policies. Access and session policies are used within the Defender for Cloud Apps portal to refine filters and set actions to take.
Correct answer is A:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment
A:
Azure Active Directory (Azure AD) Privileged Identity Management (PIM) allows you to grant temporary administrative roles to users for a specified duration, which can be set for two hours or any desired time frame. This ensures that users have elevated privileges only when needed and for a limited period.
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
extrankie
Highly Voted 3 years, 3 months agogills
Highly Voted 3 years, 3 months agotnttech
Most Recent 2 months agoMaqsoof
5 months, 4 weeks agocifofs
6 months agoAaronMedrano
8 months, 1 week agomohamed.ali.elmasry
8 months, 2 weeks agofrych
9 months, 3 weeks agoJeroenexams
10 months, 1 week agochanc2023
10 months, 3 weeks agogeggio
11 months, 1 week agoBrkyUlukn
11 months, 2 weeks agostewbiee
1 year agoxRiot007
1 year agoTahamaffia
1 year agoTomix
1 year, 1 month agoRahulX
1 year, 1 month ago