Microsoft Azure Security Technologies — Question 21

Your company recently created an Azure subscription. You have, subsequently, been tasked with making sure that you are able to secure Azure AD roles by making use of Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
Which of the following actions should you take FIRST?

Answer options

• A. You should sign up Azure Active Directory (Azure AD) Privileged Identity Management (PIM) for Azure AD roles.
• B. You should consent to Azure Active Directory (Azure AD) Privileged Identity Management (PIM).
• C. You should discover privileged roles.
• D. You should discover resources.

Correct answer: C

Explanation

The first action to take is to discover privileged roles, as it is essential to know which roles exist before you can manage their access. Options A and B are incorrect because signing up or consenting to PIM comes after understanding what roles need management. Option D is also not relevant as discovering resources does not directly pertain to securing Azure AD roles.