How can you securely provide temporary access to a specific Azure Resource Group for an external consultant without adding them as a permanent guest in your tenant or sharing passwords?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Create an Entra ID B2B guest invitation with a 'Time-bound' PIM assignment

PIM combined with guest accounts is the most controlled and auditable way to grant temporary, elevated access to external users....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

How can you securely provide temporary access to a specific Azure Resource Group for an external consultant without adding them as a permanent guest in your tenant or sharing passwords?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Create an Entra ID B2B guest invitation with a 'Time-bound' PIM assignment

Why This Answer Is Correct

PIM combined with guest accounts is the most controlled and auditable way to grant temporary, elevated access to external users.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.