SC-300 Certification Practice Question #255

Question

You have three Azure subscriptions that are linked to a single Microsoft Entra tenant.

You need to evaluate and remediate the risks associated with highly privileged accounts. The solution must minimize administrative effort.

What should you use?

Accepted Answer

Both the official Suggested Answer and the community Most Voted (19) land on B, and the highest-voted comment maps PIM directly to the requirement: PIM is purpose-built to identify, manage, and reduce risk on highly privileged accounts across a tenant and its linked Azure subscriptions (eligible/JIT assignments, MFA on activation, and access reviews to remediate). The strongest dissent (C, Permissions Management) has a real argument around "evaluate" and "minimize effort," which is why confidence is not higher — but it is decisively undercut by Microsoft retiring Permissions Management (no longer for purchase as of April 2025, support discontinued late 2025), making PIM the only durable, native answer. The other two options are off-topic.

More SC-300 practice questions