Microsoft Cybersecurity Architect — Question 26

You have 10 Azure subscriptions that contain 100 role-based access control (RBAC) role assignments.

You plan to consolidate the role assignments.

You need to recommend a solution to identify which role assignments were NOT used during the last 90 days. The solution must minimize administrative effort.

What should you include in the recommendation?

Answer options

• A. Microsoft Defender for Cloud
• B. Microsoft Entra access reviews
• C. Microsoft Entra Privileged Identity Management (PIM)
• D. Microsoft Entra Permissions Management

Correct answer: D

Explanation

The correct answer is D, Microsoft Entra Permissions Management, as it allows you to review and manage permissions across your Azure subscriptions, helping to identify unused role assignments. Options A, B, and C focus on security and access management but do not specifically address the need to consolidate and identify unused role assignments efficiently.