Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A healthcare organization needs to ensure that all users, including guest accounts, who have access to sensitive patient data applications, periodically confirm their continued need for that access. This is to comply with regulatory requirements and maintain a strong security posture. Which Microsoft Entra governance capability allows administrators to schedule and manage these recurring access reviews?
- AMicrosoft Entra PIM
- BMicrosoft Entra Entitlement Management
- CMicrosoft Entra Terms of Use
- DMicrosoft Entra Access Reviews
Show answer & explanationAnswer & explanation
Correct answer: D. Microsoft Entra Access Reviews
Microsoft Entra Access Reviews allows organizations to efficiently manage group memberships, access to enterprise applications, and privileged role assignments. It enables administrators to schedule recurring reviews where users or their managers attest to their continued need for access.
Why the other options are wrong
- A. PIM focuses on just-in-time access for privileged roles, not general access attestation.
- B. Entitlement Management streamlines access requests and approval workflows, it can include reviews but Access Reviews is the direct capability.
- C. Terms of Use ensures users accept policies before access, not ongoing review of access needs.
Microsoft Entra Access Reviews
A governance feature that enables organizations to efficiently manage group memberships, access to enterprise applications, and privileged role assignments by periodically reviewing who has access to what.
- Automates the process of reviewing user access to resources
- Enables self-service reviews by users or manager-led reviews
- Helps comply with regulatory requirements by providing audit trails
Memory trick: Access Reviews periodically check if access is still needed.