Microsoft AZ-305 Exam - Topic 11 Question 22 Discussion

Actual exam question for Microsoft's AZ-305 exam

Question #: 22
Topic #: 11

Your network contains an on-premises Active Directory forest.

You discover that when users change jobs within your company, the membership of the user groups are not being updated. As a result, the users can access resources that are no longer relevant to their job.

You plan to integrate Active Directory and Azure Active Directory (Azure AD) by using Azure AD Connect.

You need to recommend a solution to ensure that group owners are emailed monthly about the group memberships they manage.

What should you include in the recommendation?

Aconditional access policies

BTenant Restrictions

CAzure AD access reviews

DAzure AD Identity Protection

Show Suggested Answer

Suggested Answer: C

https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview

by Ozell at Jun 14, 2022, 03:27 PM

Limited Time Offer

25%

Off

Get Premium AZ-305 Questions as Interactive Web-Based Practice Test or PDF

Contribute your Thoughts:

Submit Cancel

Cecilia

4 months ago

Tenant Restrictions (B) won’t help with group emails, just saying!

upvoted 0 times

...

Celeste

4 months ago

Just a reminder, group memberships can get messy if not monitored.

upvoted 0 times

...

Catherin

4 months ago

Wait, are we sure C is the best option? What about D?

upvoted 0 times

...

Ethan

4 months ago

Definitely agree with C! Monthly reviews are super helpful.

upvoted 0 times

...

Izetta

5 months ago

I think Azure AD access reviews (C) is the way to go for this.

upvoted 0 times

...

Sharan

5 months ago

I thought Azure AD Identity Protection dealt with risk management, so it might not be relevant here.

upvoted 0 times

...

Junita

5 months ago

I feel like we had a similar practice question about group management, and Azure AD access reviews was the answer there too.

upvoted 0 times

...

Alex

5 months ago

I remember discussing Azure AD access reviews in class, and it seems like the right choice for notifying group owners about memberships.

upvoted 0 times

...

Billye

5 months ago

I'm not entirely sure, but I think conditional access policies are more about security than group management.

upvoted 0 times

...

Christoper

5 months ago

I think I have an idea on this. The command likely shows real-time throughput and CPU usage, but may not provide per-path distribution information. I'll go with that.

upvoted 0 times

...

Leota

5 months ago

I've got this! The key here is that the analyst has already reviewed the IPS and SIEM logs, but couldn't identify the file's behavior. That means we need to look elsewhere for more information. The DNS server logs are the obvious choice, as they'll likely contain details about the external site the malware is trying to reach.

upvoted 0 times

...

Gracia

5 months ago

I am almost certain it's IPv6 Snooping. We talked about these features in class, but I just can't recall the details right now.

upvoted 0 times

...

Rolf

5 months ago

I'm a bit confused on this one. Should Pacific Suites have just transferred personnel to oversee PHT's data, or was there more they should have done? I'm not sure which option is the best approach.

upvoted 0 times

...