Plan and automate identity governance

1. You want employees of a partner company that is already known to be automatically able to request access packages. What should you configure?

1. A device filter
2. A connected organization
3. A managed identity
4. A break-glass account

2. In entitlement management, what groups related resources that can be added to access packages?

1. A connected organization
2. A policy template
3. An administrative unit
4. A catalog

3. You schedule an access review of a group and the reviewer is the group owner. The owner leaves the company. What should you have configured?

1. A custom domain
2. Fallback reviewers
3. A new tenant
4. A DNS record

4. An organization wants alerts when Global Administrator is assigned outside of PIM and when roles are activated too frequently. Where can it review such alerts and audit history?

1. Azure Cost Management
2. PIM alerts and the PIM audit history and reports
3. Intune device compliance reports
4. Teams admin center reports

5. You want a user to be able to request the Exchange Administrator role only for 2 hours, with MFA and a justification. Which PIM setting provides the time limit?

1. Maximum activation duration in the role settings
2. Notification settings for role assignments
3. Require justification on activation
4. The eligible assignment expiration

6. Where can you see who activated a privileged role and why?

1. Teams call analytics
2. Sign-in logs, risky users tab
3. Exchange message trace
4. PIM resource audit history

7. Which tool lets you visualize authentication methods usage and Conditional Access insights using prebuilt reports on Entra log data?

1. Microsoft Entra workbooks
2. Windows Update reports
3. Exchange message trace
4. Teams call analytics

8. Which log shows whether a Conditional Access policy was applied to a sign-in and with what result?

1. Billing logs
2. Sign-in logs
3. DNS logs
4. Audit logs