Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Entra Permission Management is retired the best way to do an access review for an azure role is now with PIM https://learn.microsoft.com/en-us/entra/id-governance/privileged-identity-management/pim-create-roles-and-resource-roles-review?toc=%2Fazure%2Factive-directory%2Fgovernance%2Ftoc.json#impact-of-groups-assigned-to-microsoft-entra-roles-and-azure-resource-roles-in-access-reviews
A. Irrelevant - it doesn't tell you sign in logs usage for admin accounts. B. You can directly filter sign-in logs for the past 90 days which'll state whether an account has been used. C. PIM doesn't directly tell you "example account hasn't been used in 90 days" D. This is officially retired so no longer viable.
• C. Microsoft Entra Privileged Identity Management (PIM) • PIM provides detailed reports on role usage (who activated roles, when, how often). • Can identify unused role assignments over a period (e.g., 90 days). • Minimizes admin effort because it’s built for exactly this scenario