Microsoft Azure Architect Design (2020, legacy) — Question 53

You have an Azure Active Directory (Azure AD) tenant named contoso.com that contains several administrative user accounts.
You need to recommend a solution to identify which administrative user accounts have NOT signed in during the previous 30 days.
Which service should you include in the recommendation?

Answer options

• A. Azure AD Privileged Identity Management (PIM)
• B. Azure AD Identity Protection
• C. Azure Advisor
• D. Azure Activity Log

Correct answer: A

Explanation

The correct answer is A, Azure AD Privileged Identity Management (PIM), as it provides insights and management capabilities for admin roles, including sign-in activity. The other options do not focus specifically on tracking sign-in activity for administrative accounts within the last 30 days.