Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A government agency needs to ensure that all access to highly sensitive applications is reviewed and re-certified by resource owners on a quarterly basis. This process must cover both internal employees and guest accounts. Which Microsoft Entra governance capability automates and tracks these periodic access reviews?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Identity Protection
- CMicrosoft Entra Conditional Access
- DMicrosoft Entra Privileged Identity Management (PIM)
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Access Reviews
Microsoft Entra Access Reviews allow organizations to manage group memberships, access to enterprise applications, and privileged role assignments by enabling resource owners to regularly review and approve or deny continued access for users, including guests.
Why the other options are wrong
- B. Identity Protection detects risks, not automates periodic access re-certification.
- C. Conditional Access enforces policies at the time of access, not for periodic review of existing access.
- D. PIM manages just-in-time access for privileged roles, but Access Reviews cover broader periodic re-certification for all users and apps.
Microsoft Entra Access Reviews
A Microsoft Entra ID governance capability that enables organizations to efficiently manage group memberships, access to enterprise applications, and privileged role assignments by regularly reviewing access.
- Automates periodic review and re-certification of access.
- Allows resource owners to make access decisions.
- Supports review of internal employees and guest accounts.
Memory trick: Access Reviews are like a regular audit, checking if everyone still needs their keys to the castle.