MS-102 Practice Question 3011
Exam: MS-102
Domain: Deploy and manage a Microsoft 365 tenant
Difficulty: medium
You need to ensure that members of the Global Administrator role must explicitly provide a business justification and undergo time-limited activation that automatically expires after 4 hours. Which feature must you deploy?
Answer Options
A
Privileged Identity Management (PIM) role activation policies
B
Entra ID Conditional Access session lifetime controls
C
Microsoft 365 Customer Lockbox requests
D
Microsoft Purview Privileged Access Management (PAM)
Correct Answer
A: Privileged Identity Management (PIM) role activation policies
Explanation
Microsoft Entra Privileged Identity Management (PIM) allows role assignments to be configured as eligible, requiring justification, approval, MFA, and time-limited activation.