exam questions

Exam AZ-305 All Questions

View all questions & answers for the AZ-305 exam

Exam AZ-305 topic 1 question 42 discussion

Actual exam question from Microsoft's AZ-305
Question #: 42
Topic #: 1
[All AZ-305 Questions]

You have an Azure AD tenant named contoso.com that has a security group named Group1. Group1 is configured for assigned memberships. Group1 has 50 members, including 20 guest users.

You need to recommend a solution for evaluating the membership of Group1. The solution must meet the following requirements:

• The evaluation must be repeated automatically every three months.
• Every member must be able to report whether they need to be in Group1.
• Users who report that they do not need to be in Group1 must be removed from Group1 automatically.
• Users who do not report whether they need to be in Group1 must be removed from Group1 automatically.

What should you include in the recommendation?

  • A. Implement Azure AD Identity Protection.
  • B. Change the Membership type of Group1 to Dynamic User.
  • C. Create an access review.
  • D. Implement Azure AD Privileged Identity Management (PIM).
Show Suggested Answer Hide Answer
Suggested Answer: C 🗳️

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
darthfodio
Highly Voted 1 year, 10 months ago
Selected Answer: C
Based on the requirements below: The evaluation must be repeated automatically every three months. • Every member must be able to report whether they need to be in Group1. • Users who report that they do not need to be in Group1 must be removed from Group1 automatically. • Users who do not report whether they need to be in Group1 must be removed from Group1 automatically. The correct answer should be - C. Create an access. review. https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 37 times
...
GuyForget
Highly Voted 1 year, 6 months ago
How is this a legit question? The clear answer should be to configure an Access Review, but this is configured through PIM, so would they mark both C & D correct?
upvoted 6 times
AdventureChick
1 year, 3 months ago
It's always "choose the BEST answer based on the scenario". Setting up an Access Review is required in order to meet the criteria. Best Answer. Period. Full stop. Yes, Access Review is part of PIM, but PIM by itself doesn't meet the criteria (i.e. you could have PIM and say "screw that Access Review thing"). I have a bunch of MS certs, and regardless of the test, they give you a lot of questions where you can't decided between 2 answers because both are "sort of right depending on how you look at it". Those answers? It's always some little detail in the scenario that decides the Best answer. In this question, they are testing if you know the difference between PIM & Access Control. Someone who skims through material might remember PIM = reporting and not get in deep enough to know what Access Control is. There is method to their madness ... even if it bugs the crap out of us.
upvoted 18 times
...
...
SeMo0o0o0o
Most Recent 3 weeks, 3 days ago
Selected Answer: C
C is correct
upvoted 1 times
...
salned
3 months, 1 week ago
Selected Answer: C
Access review for the needed of automation
upvoted 1 times
...
Nigromante
8 months, 2 weeks ago
C is the correct answer!
upvoted 1 times
...
Fidel_104
9 months ago
Selected Answer: C
Present on today's exam (04/2024)
upvoted 5 times
...
andersonslls
10 months, 2 weeks ago
C for sure
upvoted 1 times
...
pmanglaviti
10 months, 2 weeks ago
Selected Answer: C
PIM is inadequate to complete the questions requirements. An Access review is the MORE right answer. C = Access Review. Change it already!
upvoted 1 times
...
azim1
11 months, 3 weeks ago
Selected Answer: D
Definitely D
upvoted 1 times
azim1
11 months, 3 weeks ago
Sorry, I meant C. Examtopics wont allow to modify comments.
upvoted 1 times
...
...
Rajkumar082021
1 year ago
C is the correct answer
upvoted 2 times
...
Tplenty
1 year ago
This is the same question in question 4, the answer is to Create an access review
upvoted 2 times
...
MeisAdriano
1 year, 1 month ago
Selected Answer: C
"Every three month"... that's access review
upvoted 1 times
...
dimipap3
1 year, 2 months ago
Selected Answer: C
That's literally the definition of access review
upvoted 2 times
...
123exam
1 year, 2 months ago
Selected Answer: C
https://learn.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview
upvoted 2 times
...
zarko
1 year, 2 months ago
Selected Answer: C
repeated every x time = access reviews
upvoted 2 times
...
BigShot0
1 year, 2 months ago
Selected Answer: C
Access reviews
upvoted 3 times
...
iGhostEverywhere
1 year, 2 months ago
Answer is C This is 100% an access review - PIM doesn't create reports nor is it replicable.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...