Certified Cloud Security Engineer (CCSE) — Question 3

Richard Harris works as a senior cloud security engineer in a multinational company. His organization uses Microsoft Azure cloud-based services. Richard would like to manage, control, and monitor the access to important resources in his organization. Which service in Azure AD can enable Richard to manage, control, and monitor the access to resources in Azure, Azure AD, and other Microsoft online services such as Microsoft Intune or Microsoft 365?

Answer options

• A. Privileged Identity Management
• B. Federated Identity Management
• C. Privileged Access Management
• D. System for Cross-Domain Identity Management

Correct answer: C

Explanation

The correct answer is C, Privileged Access Management, as it specifically helps manage and control access to sensitive resources across Azure and other Microsoft services. Option A, Privileged Identity Management, is focused on managing temporary access to resources, while B, Federated Identity Management, deals with identity federation across domains. Option D, System for Cross-Domain Identity Management, is not directly related to managing access in Azure services.