Microsoft 365 Fundamentals — Question 337

A company is evaluating Microsoft 365.

You need to identify concepts of using the principle of least privilege.

Which two concepts should you identify? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

Answer options

• A. Just-in-time access
• B. Just-enough-access
• C. Azure AD multifactor authentication
• D. Blocking legacy authentication

Correct answer: A, B

Explanation

Just-in-time access and Just-enough-access are both key concepts of the least privilege principle, as they enable users to have access only when necessary and only to the resources they need. Azure AD multifactor authentication, while enhancing security, does not directly pertain to the least privilege principle, and blocking legacy authentication is a security measure rather than a concept of privilege management.