What should you do?

You have a Microsoft 365 tenant.

The Azure Active Directory (Azure AD) tenant syncs to an on-premises Active Directory domain. You plan to create an emergency-access administrative account named Emergency1. Emergency1

will be assigned the Global administrator role in Azure AD. Emergency1 will be used in the event of Azure AD functionality failures and on-premises infrastructure failures.

You need to reduce the likelihood that Emergency1 will be prevented from signing in during an emergency.

What should you do?
A . Configure Azure Monitor to generate an alert if Emergency1 is modified or signs in.
B . Require Azure AD Privileged Identity Management (PIM) activation of the Global administrator role for Emergency1.
C . Configure a conditional access policy to restrict sign-in locations for Emergency1 to only the corporate network.
D . Configure a conditional access policy to require multi-factor authentication (MFA) for Emergency1.

View Answer

Answer: A