AB-650 Practice Question 3134
Exam: AB-650
Domain: Govern and secure Microsoft 365 tenants and workloads
Difficulty: medium
You configure Privileged Identity Management (PIM) for the Security Administrator role. What is the effect of making an admin "Eligible" rather than "Active"?
Answer Options
A
The admin must manually activate the role via PIM when needed
B
The admin possesses permanent 24/7 Global Admin rights
C
The admin cannot access the Azure portal under any circumstances
D
The admin account is deleted automatically after 30 days
Correct Answer
A: The admin must manually activate the role via PIM when needed
Explanation
An eligible admin does not hold the permissions permanently; they must explicitly activate the role via the PIM portal, undergo approvals or MFA, and access is time-limited.