Which PIM alert should you modify?

You have a Azure subscription.

You enable Azure Active Directory (Azure AD) Privileged identify (PIM).

Your company’s security policy for administrator accounts has the following conditions:

* The accounts must use multi-factor authentication (MFA).

* The account must use 20-character complex passwords.

* The passwords must be changed every 180 days.

* The account must be managed by using PIM.

You receive alerts about administrator who have not changed their password during the last 90 days.

You need to minimize the number of generated alerts.

Which PIM alert should you modify?
A . Roles don’t require multi-factor authentication for activation.
B . Administrator aren’t using their privileged roles
C . Roles are being assigned outside of Privileged identity Management
D . Potential stale accounts in a privileged role.

View Answer

Answer: D

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/active-directory/privileged-identity-management/pim-how-to-configure-security-alerts?tabs=new