Microsoft Azure Architect Design (AZ-304) Practice Test

Disable ads (and more) with a membership for a one time $2.99 payment

Prepare for the Microsoft Azure Architect Design Test with our comprehensive questions and detailed explanations. Get ready to ace your exam with tailored study materials!

Each practice test/flash card set has 50 randomly selected questions from a bank of over 500. You'll get a new set of questions each time!

Practice this question and more.


Which Azure service allows automated review and management of user group memberships?

  1. Azure AD Identity Protection

  2. Azure AD access reviews

  3. Azure RBAC

  4. Azure Policy

The correct answer is: Azure AD access reviews

The service that enables automated review and management of user group memberships is Azure AD access reviews. This feature is designed to enhance governance and compliance by allowing administrators to set up periodic reviews of group memberships. Organizations can utilize this functionality to ensure that only the right individuals have access to specific resources, reducing risks associated with excess privileges or outdated permissions. Azure AD access reviews also facilitate the assessment of access rights on a regular basis, which is crucial for maintaining security and adhering to compliance requirements. Administrators can automate the review process, send notifications to reviewers, and take appropriate actions based on the responses received during the review, such as removing users who no longer require access. While Azure AD Identity Protection, Azure RBAC, and Azure Policy each play critical roles in identity management and security, they do not primarily focus on automating the review of user group memberships in the same way that Azure AD access reviews do. Identity Protection is more geared towards risk detection and response, RBAC is about assigning roles and managing permissions within Azure resources, and Azure Policy is used for enforcing organizational standards and assessing compliance across Azure resources.