Microsoft 365 Administrator — Question 96

You have a Microsoft E5 subscription.
You need to ensure that administrators who need to manage Microsoft Exchange Online are assigned the Exchange Administrator role for five hours at a time.
What should you implement?

Answer options

• A. Azure AD Privileged Identity Management (PIM)
• B. a conditional access policy
• C. a communication compliance policy
• D. Azure AD Identity Protection
• E. groups that have dynamic membership

Correct answer: A

Explanation

The correct answer is A, Azure AD Privileged Identity Management (PIM), as it allows you to manage role assignments and set time limits for elevated access. The other options do not provide the functionality to assign roles for a limited time; for example, a conditional access policy (B) relates to access control rather than role assignment, while Azure AD Identity Protection (D) focuses on security risk detection.