AZ-500 Secure identity and access

Your team must manage privileged roles with approval. Which Azure option fits best?

Multiple choice — select one answer

Answer choices

  1. a. Conditional Access blocking legacy auth
  2. b. Entra Privileged Identity Management
  3. c. Email approvals (not recommended for production workloads)
  4. d. Entra Conditional Access

Architectural breakdown & explanation

PIM reduces standing privilege.

Correct answer(s): b. Entra Privileged Identity Management

Exam domain: Secure identity and access (25% weight on the official guide).

Official documentation & study links

Practice this certification

This page is one question from the Microsoft Azure Security Engineer Associate bank. Run a full timed practice exam with domain-weighted random questions in your browser.