What should you use to implement the security policy?

You nave 200 resource groups across 20 Azure subscriptions.

Your company’s security policy states that the security administrator most verify all assignments of the Owner role for the subscriptions and resource groups once a month. All assignments that are not approved try the security administrator must be removed automatically. The security administrator must be prompted every month to perform the verification.

What should you use to implement the security policy?
A . Access reviews in identity Governance
B . role assignments in Azure Active Directory (Azure AD) Privileged Identity Management (PIM)
C . Identity Secure Score in Azure Security Center
D . the user risk policy Azure Active Directory (Azure AD) Identity Protection

View Answer

Answer: A

Explanation:

Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User’s access can be reviewed on a regular basis to make sure only the right people have continued access.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview