MENU
You are configuring Azure Active Directory (AD) Privileged Identity Management.
You need to provide a user named Admm1 with read access to a resource group named RG1 for only one month.
The user role must be assigned immediately.
What should you do?
Suggested Answer: B
Get Premium AZ-104 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then they complete an activation process and become an active admin for a predetermined amount of time.
References:
https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure
14 comments · newest first
DA
Darrel
12 months ago
Wait, can you really assign roles for just one month? That’s new to me!
LO
Louvenia
1 year ago
D seems overly complicated for this situation.
KA
Kaitlyn
1 year ago
C sounds wrong, why would you want a permanent role?
TH
Thad
1 year ago
I think B makes more sense for temporary access.
LU
Luisa
1 year ago
A is the way to go for immediate access!
WI
Wilson
1 year ago
Creating a custom role sounds complicated for this scenario. I feel like we should stick to the predefined roles, but I can't remember if we can set a time limit on them.
NG
Ngoc
1 year ago
I'm a bit confused about the difference between active and eligible roles. I feel like we need to assign something that lasts only a month, but I can't recall the specifics.
CH
Charisse
1 year ago
I remember practicing a similar question where we had to assign roles, and I think an active role might be the right choice for immediate access.
EL
Elvera
1 year ago
I think we need to assign an eligible role since it allows temporary access, but I'm not entirely sure if it can be set for just one month.
LO
Loise
1 year ago
I'm a little confused by this question. I know debuggers are used by developers, but I'm not sure how hackers would use them. I'll have to review my notes on common hacking tools and techniques.
AR
Aretha
1 year ago
I remember something about the Secure Ticket Authority and its role, but I'm not entirely sure if it's the Gateway or the Delivery Controllers that manage it.
FL
Fletcher
1 year ago
Hmm, I'm a bit unsure about this one. I'll need to think through the details of the scenario to figure out if the underlined text is accurate or needs to be modified.
AN
Anglea
1 year ago
I'm pretty confident the answer is C. Hubs are a passive device that just repeats all traffic to all ports, so you'd need a separate monitoring solution to see what's going on. The other options are more active network devices with built-in monitoring capabilities.
DA
Dallas
1 year ago
I'm a bit confused on the best approach here. There are pros and cons to each of the measurement solutions mentioned. I think I'd need to do some more research to determine which one would be the most appropriate for this specific scenario.