SC-100 Practice Question 3902
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: easy
You are designing Microsoft Entra Privileged Identity Management (PIM) for Azure RBAC and Entra roles. What is the security advantage of configuring roles as "Eligible" rather than "Active"?
Answer Options
A
Enforces Just-In-Time access requiring activation, approval, and MFA
B
Grants 24/7 permanent administrative privileges without expiration
C
Blocks administrators from ever accessing the Azure portal
D
Deletes the administrator account automatically after 7 days
Correct Answer
A: Enforces Just-In-Time access requiring activation, approval, and MFA
Explanation
Eligible assignments enforce Just-In-Time (JIT) access, requiring administrators to explicitly request activation with justification, MFA verification, and approval for a time-limited period.