Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A company requires that all users, including guests, periodically confirm their continued need for access to sensitive applications and groups. This process is essential for compliance and to reduce the risk of stale access permissions. Which Microsoft Entra governance capability is designed to automate and manage this periodic review of access?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Privileged Identity Management
- CMicrosoft Entra Entitlement Management
- DMicrosoft Entra Verified ID
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Access Reviews
Microsoft Entra Access Reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and privileged role assignments. They allow users or reviewers to periodically attest to the continued need for access.
Why the other options are wrong
- B. PIM manages just-in-time access for privileged roles, not periodic reviews of all access.
- C. Entitlement Management automates access provisioning and de-provisioning, but Access Reviews handle the periodic verification aspect.
- D. Verified ID is for decentralized digital identities, unrelated to reviewing access permissions.
Microsoft Entra Access Reviews
A Microsoft Entra ID governance feature that allows organizations to manage group memberships, access to enterprise applications, and privileged role assignments by periodically reviewing who has access to what.
- Automates the process of reviewing and certifying access rights.
- Helps ensure compliance and reduce the risk of excessive permissions.
- Reviewers can be managers, group owners, or self-review.
- Can automatically remove access for users who no longer need it.
Memory trick: Entra's governance keeps access clear, reviewing who's in, year after year.