Microsoft Security, Compliance, and Identity Fundamentals — Question 77

You have an Azure subscription.
You need to implement approval-based, time-bound role activation.
What should you use?

Answer options

• A. Windows Hello for Business
• B. Azure Active Directory (Azure AD) Identity Protection
• C. access reviews in Azure Active Directory (Azure AD)
• D. Azure Active Directory (Azure AD) Privileged Identity Management (PIM)

Correct answer: D

Explanation

The correct answer is D, Azure Active Directory (Azure AD) Privileged Identity Management (PIM), as it specifically allows for time-bound role activation that requires approval. Options A and B do not provide role activation features, while option C focuses on access reviews rather than the activation of roles.