The answer is Access Reviews. This Microsoft Entra ID feature is the correct choice because it enables administrators to create recurring reviews that automatically flag and remove guest accounts based on inactivity, such as a 90-day period since the last sign-in. The review process not only enforces the cleanup policy but also generates detailed audit logs and reports, directly satisfying the auditor compliance requirement. On the AZ-305 exam, this scenario tests your understanding of identity governance and how Access Reviews differ from manual cleanup or basic lifecycle workflows—a common trap is confusing it with Entra ID’s automatic user provisioning, which lacks the review and reporting layer. Remember the memory tip: “Access Reviews audit the access, provisioning just grants it.”
AZ-305 Practice Question: Design identity, governance, and monitoring solutions
This AZ-305 practice question tests your understanding of design identity, governance, and monitoring solutions. Read the scenario carefully and evaluate each option against the stated constraints before committing to an answer. A key principle to apply: access Reviews automate periodic review of user and group access.. Once you have made your selection, read the full explanation to reinforce the concept and understand why each distractor is designed to mislead on exam day.
A company uses Microsoft Entra ID (Microsoft Entra ID). They want to automatically review and remove guest accounts that have not signed in for 90 days. They also need to generate reports for auditors. Which Microsoft Entra ID feature should they use?
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access Reviews
Access Reviews in Microsoft Entra ID allow administrators to create recurring reviews of guest users' access. By configuring a review with a 'days since last sign-in' condition (e.g., 90 days), Entra ID automatically flags and can remove guest accounts that have not authenticated within that period. The review process also generates detailed audit logs and reports suitable for auditor compliance, directly meeting the stated requirements.
Key principle: Access Reviews automate periodic review of user and group access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
✗
Identity Protection
Why it's wrong here
Identity Protection detects risky sign-ins and compromised users but does not automatically review or remove guest accounts.
✓
Access Reviews
Why this is correct
Access Reviews allow periodic review of guest access, automated removal based on criteria like no sign-in activity, and generate audit reports.
Related concept
Access Reviews automate periodic review of user and group access.
✗
Privileged Identity Management
Why it's wrong here
PIM manages just-in-time privileged role assignments but is not designed for reviewing guest account activity.
✗
Conditional Access
Why it's wrong here
Conditional Access policies control sign-in conditions (e.g., require MFA) but do not automatically review or remove accounts.
Common exam traps
Common exam trap: answer the scenario, not the keyword
The trap here is that candidates often confuse Privileged Identity Management (PIM) with Access Reviews because both involve 'reviewing' access, but PIM is strictly for privileged roles, not for reviewing inactive guest accounts.
Detailed technical explanation
How to think about this question
Access Reviews leverage the Microsoft Graph API to query the 'signInActivity' property of guest user objects, which tracks the last successful interactive sign-in. The review can be configured to auto-apply results (e.g., remove access) after the review period ends, and all actions are logged in the Entra ID audit log with a 'UserAccessReview' activity type. In a real-world scenario, an organization with thousands of B2B collaboration guests can use this to enforce a '90-day inactivity' policy without manual intervention, ensuring compliance with data retention regulations like GDPR.
KKey Concepts to Remember
Access Reviews automate periodic review of user and group access.
They can target guest users, groups, or applications.
Automated actions include removing access for inactive users.
Access Reviews generate audit-ready reports on review outcomes.
TExam Day Tips
→Watch for words such as best, first, most likely and least administrative effort.
→Review why wrong options are wrong, not only why the correct option is correct.
Key takeaway
Access Reviews automate periodic review of user and group access.
Real-world example
How this comes up in practice
A company's IT admin needs to give a contractor read-only access to production logs without sharing account credentials. Using role-based access control (RBAC) and temporary scoped permissions — not a permanent shared password — is the correct pattern. Questions like this test whether you can apply least-privilege access across cloud identity services.
Related glossary terms
Concepts from this question explained
These glossary pages explain the core terms tested in this AZ-305 question in full detail.
Review access Reviews automate periodic review of user and group access., then practise related AZ-305 questions on the same topic to reinforce the concept.
Design identity, governance, and monitoring solutions — This question tests Design identity, governance, and monitoring solutions — Access Reviews automate periodic review of user and group access..
What is the correct answer to this question?
The correct answer is: Access Reviews — Access Reviews in Microsoft Entra ID allow administrators to create recurring reviews of guest users' access. By configuring a review with a 'days since last sign-in' condition (e.g., 90 days), Entra ID automatically flags and can remove guest accounts that have not authenticated within that period. The review process also generates detailed audit logs and reports suitable for auditor compliance, directly meeting the stated requirements.
What should I do if I get this AZ-305 question wrong?
Review access Reviews automate periodic review of user and group access., then practise related AZ-305 questions on the same topic to reinforce the concept.
What is the key concept behind this question?
Access Reviews automate periodic review of user and group access.
About these practice questions
Courseiva creates original exam-style practice questions with explanations and wrong-answer analysis. It does not publish real exam questions, exam dumps, or protected exam content. Learn why practice questions differ from exam dumps →
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.
Question Discussion
Share a tip, memory trick, or ask about the reasoning behind this question. Do not post real exam questions, leaked content, braindumps, or copyrighted exam material. Comments are moderated and may be removed without notice.
Sign in to join the discussion.