Deal of The Day! Hurry Up, Grab the Special Discount - Save 25% - Ends In 00:00:00 Coupon code: SAVE25
Welcome to Pass4Success

- Free Preparation Discussions

Microsoft SC-900 Exam - Topic 3 Question 83 Discussion

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?
D) conditional access policies
A) Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
B) Azure Multi-Factor Authentication (MFA)
C) Azure Active Directory (Azure AD) Identity Protection

Microsoft SC-900 Exam - Topic 3 Question 83 Discussion

Actual exam question for Microsoft's SC-900 exam
Question #: 83
Topic #: 3
[All SC-900 Questions]

What can you use to provide a user with a two-hour window to complete an administrative task in Azure?

Show Suggested Answer Hide Answer
Suggested Answer: D

https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-configure

Privileged Identity Management provides time-based and approval-based role activation to mitigate the risks of excessive, unnecessary, or misused access permissions on resources that you care about. Here are some of the key features of Privileged Identity Management: Provide just-in-time privileged access to Azure AD and Azure resources Assign time-bound access to resources using start and end dates Require approval to activate privileged roles Enforce multi-factor authentication to activate any role Use justification to understand why users activate Get notifications when privileged roles are activated Conduct access reviews to ensure users still need roles Download audit history for internal or external audit Prevents removal of the last active Global Administrator role assignment


Contribute your Thoughts:

0/2000 characters
Leah
4 days ago
D) is definitely the way to go for this scenario.
upvoted 0 times
...
Tarra
9 days ago
I like A) too, but it’s not specifically for time.
upvoted 0 times
...
Horace
14 days ago
Right, MFA is security-focused. D) is the best choice here.
upvoted 0 times
...
Carin
20 days ago
I feel like B) MFA is important, but not for time limits.
upvoted 0 times
...
Sage
25 days ago
PIM is good, but D) is more flexible for time windows.
upvoted 0 times
...
Cherelle
30 days ago
I’m not sure. What about A) PIM? It manages roles and time.
upvoted 0 times
...
Margarett
1 month ago
I agree, D) makes sense. It controls access based on conditions.
upvoted 0 times
...
Maryrose
1 month ago
I think it's D) conditional access policies. They can set time limits.
upvoted 0 times
...
Wynell
2 months ago
B) MFA is important, but not for this task.
upvoted 0 times
...
Chu
2 months ago
Totally agree with Nana, PIM is the way to go!
upvoted 0 times
...
Rosamond
2 months ago
Wait, can you really set a two-hour window with PIM? Sounds odd.
upvoted 0 times
...
Sol
2 months ago
I think D) conditional access policies could work too.
upvoted 0 times
...
Nana
2 months ago
A) Azure AD PIM is the right choice!
upvoted 0 times
...
Chun
2 months ago
I vaguely remember something about Azure AD Identity Protection, but I don't think it fits this scenario.
upvoted 0 times
...
Ronny
4 months ago
I feel like Azure MFA is more about security and not really about giving time windows for tasks.
upvoted 0 times
...
Elmer
4 months ago
I remember practicing with conditional access policies, but I can't recall if they specifically allow for time limits like this.
upvoted 0 times
...
Malcom
4 months ago
I think it might be Azure AD Privileged Identity Management, but I'm not entirely sure how it relates to time windows.
upvoted 0 times
...

Save Cancel