Home › Azure AZ-204 › cloudcomputing › az204security › Which Azure feature lets an admin grant a role a…
Which Azure feature lets an admin grant a role assignment that's only ACTIVE for an approved time window with auditing — useful for break-glass admin access?
ASharing the global admin password during incidents
BMicrosoft Entra Privileged Identity Management (PIM)
CLong-lived role assignments with no time window
DRemoving all roles and re-adding them manually
Answer & Solution
Correct answer: B. Microsoft Entra Privileged Identity Management (PIM)
PIM provides JIT activation with approval + MFA + auditing. The other options are textbook insecurity.
Related questions
Which Azure feature continuously scans App Service / Function code for known vulnerabilitiWhich type of Microsoft Identity token does a client present to a downstream API to prove Which configuration lets an Azure Function access a SECRET stored in Key Vault via an App An Azure Function needs to read a secret from Key Vault on every cold start. What's the MOAn Azure Web App needs to authenticate users with Entra ID without writing OAuth code. WhiWhich Azure feature lets a developer call `DefaultAzureCredential` from the Azure SDK and Which configuration gives an Azure VM, App Service, or Function App an identity to call KeWhich Azure service handles consumer/customer-facing identity (B2C) — sign-in for end user