An organization wants to analyze their Entra ID (Azure AD) permissions to identify 'over-privileged' users and service principals across their entire multi-cloud estate (Azure, AWS, GCP). Which Microsoft Entra service provides this Cloud Infrastructure Entitlement Management (CIEM) capability?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Microsoft Entra Permissions Management

Permissions Management (formerly CloudKnox) provides comprehensive visibility and control over permissions for all identities and resources in multi-cloud environments....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

An organization wants to analyze their Entra ID (Azure AD) permissions to identify 'over-privileged' users and service principals across their entire multi-cloud estate (Azure, AWS, GCP). Which Microsoft Entra service provides this Cloud Infrastructure Entitlement Management (CIEM) capability?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Microsoft Entra Permissions Management

Why This Answer Is Correct

Permissions Management (formerly CloudKnox) provides comprehensive visibility and control over permissions for all identities and resources in multi-cloud environments.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.