Microsoft AZ-104 Exam - Topic 12 Question 13 Discussion

Actual exam question for Microsoft's AZ-104 exam

Question #: 13
Topic #: 12

[All AZ-104 Questions]

You are configuring Azure Active Directory (AD) Privileged Identity Management.

You need to provide a user named Admm1 with read access to a resource group named RG1 for only one month.

The user role must be assigned immediately.

What should you do?

AAssign an active role.

BAssign an eligible role.

CAssign a permanently active role.

DCreate a custom role and a conditional access policy.

Show Suggested Answer

Suggested Answer: B

Azure AD Privileged Identity Management introduces the concept of an eligible admin. Eligible admins should be users that need privileged access now and then, but not all-day, every day. The role is inactive until the user needs access, then they complete an activation process and become an active admin for a predetermined amount of time.

References:

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

by Brandon at May 03, 2022, 09:47 AM

Limited Time Offer

25%

Off

Get Premium AZ-104 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Darrel

10 months ago

Wait, can you really assign roles for just one month? That’s new to me!

upvoted 0 times

...

Louvenia

10 months ago

D seems overly complicated for this situation.

upvoted 0 times

...

Kaitlyn

11 months ago

C sounds wrong, why would you want a permanent role?

upvoted 0 times

...

Thad

11 months ago

I think B makes more sense for temporary access.

upvoted 0 times

...

Luisa

11 months ago

A is the way to go for immediate access!

upvoted 0 times

...

Wilson

11 months ago

Creating a custom role sounds complicated for this scenario. I feel like we should stick to the predefined roles, but I can't remember if we can set a time limit on them.

upvoted 0 times

...

Ngoc

11 months ago

I'm a bit confused about the difference between active and eligible roles. I feel like we need to assign something that lasts only a month, but I can't recall the specifics.

upvoted 0 times

...

Charisse

11 months ago

I remember practicing a similar question where we had to assign roles, and I think an active role might be the right choice for immediate access.

upvoted 0 times

...

Elvera

11 months ago

I think we need to assign an eligible role since it allows temporary access, but I'm not entirely sure if it can be set for just one month.

upvoted 0 times

...

Loise

11 months ago

I'm a little confused by this question. I know debuggers are used by developers, but I'm not sure how hackers would use them. I'll have to review my notes on common hacking tools and techniques.

upvoted 0 times

...

Aretha

11 months ago

I remember something about the Secure Ticket Authority and its role, but I'm not entirely sure if it's the Gateway or the Delivery Controllers that manage it.

upvoted 0 times

...

Fletcher

11 months ago

Hmm, I'm a bit unsure about this one. I'll need to think through the details of the scenario to figure out if the underlined text is accurate or needs to be modified.

upvoted 0 times

...

Anglea

11 months ago

I'm pretty confident the answer is C. Hubs are a passive device that just repeats all traffic to all ports, so you'd need a separate monitoring solution to see what's going on. The other options are more active network devices with built-in monitoring capabilities.

upvoted 0 times

...

Dallas

11 months ago

I'm a bit confused on the best approach here. There are pros and cons to each of the measurement solutions mentioned. I think I'd need to do some more research to determine which one would be the most appropriate for this specific scenario.

upvoted 0 times

...