AZ-305 Practice Question: Design identity, governance, and monitoring solutions
A company uses Microsoft Entra ID. They want to allow external business partners to request access to a specific internal application. The access must be time-limited and require approval from a manager within the partner's organization. Additionally, access should automatically expire after the defined period. Which Microsoft Entra ID feature should they use?
⚠ Common exam trap
Watch out — candidates often confuse Entitlement Management with B2B Collaboration, thinking B2B alone provides access control and expiration, when in fact B2B only handles identity creation and invitation, while Entitlement Management adds the governance layer for time-limited, approved access.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID Entitlement Management
Microsoft Entra ID Entitlement Management enables organizations to manage access requests for internal and external users through access packages. It supports time-limited access with automatic expiration and allows delegation of approval to a manager within the partner's organization via connected organizations. This directly meets the requirement for external partner self-service access with time-bound, approved access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra ID Entitlement Management
Why this is correct
Microsoft Entra ID Entitlement Management enables you to create access packages that external users can request. You can configure approval workflows, set time limits, and auto-expire access. It is part of Microsoft Entra ID Identity Governance.
- ✗
Microsoft Entra ID B2B Collaboration
Why it's wrong here
B2B Collaboration in Microsoft Entra ID is the underlying service that allows you to invite or allow external users to sign in with their own credentials. However, B2B Collaboration itself is a directory-level provisioning mechanism: it creates a guest user object but does not include a built-in, self-service request/approval workflow or per-resource time-limited access. While an administrator can manually configure a directory-wide guest user expiration policy with PowerShell or Graph, that is a coarse-grained setting and not an access-package-level lifecycle with approvals and automatic expiration.
- ✗
Microsoft Entra ID Identity Governance
Why it's wrong here
Microsoft Entra ID Identity Governance is a broader category that includes Entitlement Management, access reviews, etc. It is not a specific feature. The question asks for a feature, so Entitlement Management is the specific feature within Identity Governance.
- ✗
Microsoft Entra ID Privileged Identity Management (PIM)
Why it's wrong here
Privileged Identity Management (PIM) is a Microsoft Entra ID Governance feature focused on controlling privileged access to Azure AD roles and Azure resources. It provides just-in-time role activation, approval for activating those roles, and time-bound assignments for administrators, not for granting external users access to business applications. The access packages in Entitlement Management, by contrast, are designed for both internal and external resource access with a full request lifecycle, whereas PIM is scoped to high-privilege role management.
Go deeper
Related to this question
About these practice questions
This AZ-305 question is part of Courseiva's 204-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.