Solas Renewable Energy is designing an identity and access management solution for its Microsoft Entra ID tenant. The solution must meet the following requirements:
- Enforce multi-factor authentication (MFA) for all users assigned to privileged administrator roles when they access the Azure portal.
- Prevent administrative users from being permanently assigned to privileged roles, requiring them to activate roles on demand.
- Ensure that the tenant remains accessible to administrators even during a widespread Microsoft Entra MFA service outage.
Which of the following configurations should you include in the design? (Select TWO.)
- Create a Conditional Access policy requiring multi-factor authentication for administrative roles, and exclude a dedicated, cloud-only emergency access account.Cevap
- Configure eligible role assignments in Microsoft Entra Privileged Identity Management (PIM) for the administrative roles.Cevap
- CConfigure active role assignments in Microsoft Entra Privileged Identity Management (PIM) for the administrative roles.
- DDeploy Active Directory Federation Services (AD FS) to manage multi-factor authentication and role assignment exclusion rules.
Cevap
Create a Conditional Access policy requiring multi-factor authentication for administrative roles, and exclude a dedicated, cloud-only emergency access account; and configure eligible role assignments in Microsoft Entra Privileged Identity Management (PIM) for the administrative roles.
To meet the security and reliability goals, you must enforce MFA using Conditional Access while excluding an emergency access account to prevent lockout during service outages. Additionally, to avoid permanent privileges, you must configure eligible assignments in Microsoft Entra Privileged Identity Management (PIM), which allows administrators to elevate their access on demand.
Adım Adım Çözüm
Anahtar Kavram
Designing Microsoft Entra ID Conditional Access policies with emergency exclusions and integrating Privileged Identity Management (PIM) for just-in-time access.