SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

Question

You have a Microsoft Entra tenant that uses Privileged Identity Management (PIM).

You need to change the AI Administrator role settings to meet these requirements:

Elevated access must be reviewed by another administrator before it is granted.
Privileged access must be automatically removed after a specified period.

Which two settings should you configure? Each correct answer presents part of the solution.

NOTE: Each correct selection is worth one point.

Choose two

Explanation

Require approval to activate requires an eligible-role activation request to be approved by a designated approver before elevation occurs. Activation maximum duration sets the number of hours an activated role remains active before it expires, removing the temporary privileged access.

Learn more

Configure Microsoft Entra role settings in Privileged Identity Management

SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

AstroTutor

Notes

Readiness

QuestionQ21

Community Discussion