sc-900 Practice Question 1784
Exam: sc-900
Domain: Describe the capabilities of Microsoft Entra
Topic: Describe Microsoft Entra access management
Difficulty: medium
A security analyst at Contoso Ltd notices that a user in the 'Marketing' department has been accessing customer data outside of working hours. How should they leverage Access Reviews to address this issue and ensure compliance with company policies?
Answer Options
A
Disable the user account immediately
B
Initiate an Access Review to assess the user's access to customer data and ensure compliance
C
Change the user's permissions to include more data types
D
Increase the user's permissions to cover more departments
Correct Answer
B: Initiate an Access Review to assess the user's access to customer data and ensure compliance
Explanation
The correct answer is B. The security analyst should initiate an Access Review to assess the user's access to customer data and determine if the access is justified and compliant with company policies. Option A is incorrect because it suggests disabling the user account, which would disrupt their work. Option C is incorrect as it focuses on changing permissions without reviewing them, which may not identify misuse. Option D is incorrect because it suggests increasing permissions, which would not address the misuse issue.