Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A financial services company needs to ensure that all administrative actions performed by privileged users are subject to review and approval before execution, even for temporary assignments. Additionally, they require a comprehensive audit trail of all privileged activity. Which Microsoft Entra governance capability is best suited for this stringent requirement?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Conditional Access
- CMicrosoft Entra Privileged Identity Management (PIM)
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: C. Microsoft Entra Privileged Identity Management (PIM)
Microsoft Entra Privileged Identity Management (PIM) allows for just-in-time (JIT) access to privileged roles, requiring activation and approval before use. It also provides extensive auditing and reporting, directly meeting the need for review, approval, and a comprehensive audit trail for administrative actions.
Why the other options are wrong
- A. Access Reviews focus on periodic verification of existing access, not on-demand activation with approval for privileged roles.
- B. Conditional Access enforces policies based on conditions but does not provide JIT access, approval workflows for privileged roles, or detailed audit trails of privileged activity.
- D. Identity Protection focuses on detecting and remediating identity-based risks, not on managing the lifecycle and approval of privileged administrative actions.
Microsoft Entra Privileged Identity Management (PIM)
A service in Microsoft Entra ID that enables you to manage, control, and monitor access to important resources in Microsoft Entra ID, Azure, and other Microsoft Online Services.
- Provides just-in-time (JIT) access to roles.
- Enforces approval workflows for role activation.
- Offers time-bound access and comprehensive audit trails.
Memory trick: PIM is the royal guard for your most powerful roles.