Microsoft 365 Administrator Expert MS-102 Practice Question
Your company uses Microsoft Entra Privileged Identity Management (PIM). Policy requires that on-call engineers obtain the Exchange Administrator role only when needed, for a maximum of eight hours, with MFA and approval from the messaging lead. You have created a security group that contains the on-call engineers.
You need to configure the role assignment in PIM with the least administrative effort.
Which configuration should you use?
Create an eligible assignment for each engineer that requires justification only and allows a 24-hour maximum activation.
Assign the security group as eligible for the Exchange Administrator role and configure the role settings to require MFA, one approver, and an eight-hour maximum activation.
Create a recurring time-bound active assignment for the security group that starts and ends during each on-call week and requires approval from the messaging lead.
Assign the security group as active for the Exchange Administrator role with a permanent end date and require MFA at sign-in.
Making the security group eligible for the Exchange Administrator role removes standing privileges while avoiding the overhead of individual assignments. In the role settings you can set the activation duration to eight hours, require MFA at activation, and name the messaging lead as the sole approver. Active assignments would grant immediate access, and eligible assignments without the specified controls would not meet policy.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra Privileged Identity Management (PIM)?
Open an interactive chat with Bash
Why choose 'eligible' assignments over 'active' assignments in PIM?
Open an interactive chat with Bash
How can you configure approval workflows in PIM?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Deploy and manage a Microsoft 365 tenant
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .