Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraHard
A healthcare organization uses Microsoft Entra ID and is subject to strict regulatory compliance requiring a periodic review of all user access, including guest accounts, to sensitive patient data applications. The reviews must be auditable and allow resource owners to certify or revoke access. Which Microsoft Entra capability best facilitates this requirement?
- AMicrosoft Entra Access Reviews
- BMicrosoft Entra Conditional Access
- CMicrosoft Entra Privileged Identity Management (PIM)
- DMicrosoft Entra Identity Protection
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Access Reviews
Microsoft Entra Access Reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. It allows business owners to regularly review and certify who has access to what, which is critical for compliance.
Why the other options are wrong
- B. Conditional Access enforces policies, but Access Reviews performs the periodic review and certification.
- C. PIM manages privileged roles, not general user and guest access certification for apps.
- D. Identity Protection detects risks, not for periodic access certification.
Microsoft Entra Access Reviews
A governance feature that enables organizations to manage access lifecycle by periodically reviewing who has access to specific resources (groups, applications, roles) and ensuring that only authorized users maintain access.
- Automates periodic access certification
- Delegates reviews to business owners
- Provides audit trails for compliance
Memory trick: Regularly check the access guest list to keep things compliant.