AZ-305 Practice Question: Design identity, governance, and monitoring solutions
Your company has a Microsoft Entra ID tenant with 10,000 users. You need to implement a lifecycle workflow that automatically disables user accounts when employees leave the organization, and then deletes them after 30 days. What should you use?
⚠ Common exam trap
Candidates often confuse Microsoft Entra ID Governance with Microsoft Entra Domain Services, mistakenly thinking that domain services include user lifecycle management, when in fact Entra ID Governance is the correct service for automated identity lifecycle tasks.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra ID Governance
Microsoft Entra ID Governance includes lifecycle workflows that automate the process of disabling and deleting user accounts based on triggers such as employee departure. This feature allows you to configure a workflow that disables the account immediately and then schedules deletion after a specified period, such as 30 days, without requiring custom scripting or manual intervention.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Domain Services
Why it's wrong here
Microsoft Entra Domain Services offers managed domain services such as LDAP, Kerberos, NTLM, and domain join for legacy on-premises applications, but it does not include identity lifecycle automation. It lacks Lifecycle Workflows, which are required to automatically onboard, offboard, or update users based on HR events like hire or termination. Therefore, Domain Services is an infrastructure service, not a governance tool for user lifecycle processes.
- ✓
Microsoft Entra ID Governance
Why this is correct
Microsoft Entra ID Governance contains Lifecycle Workflows, a feature that automates joiner, mover, and leaver scenarios by orchestrating tasks like sending notifications, assigning access, and disabling accounts. These workflows can be triggered by HR-driven provisioning, schedules, or on-demand execution, and they provide centralized logging and audit trails. This exactly addresses the company's need to automate lifecycle processes for 10,000 users, making it the correct choice.
- ✗
Microsoft Intune
Why it's wrong here
Microsoft Intune is a cloud-based unified endpoint management (UEM) service that manages devices, mobile applications, and compliance policies, not user identity lifecycle processes. While Intune can target user groups or attributes to apply device configurations, it cannot orchestrate multi-step lifecycle events such as creating or deleting user accounts or triggering role-based access changes. Lifecycle Workflows are a distinct identity governance feature that is outside Intune's scope.
- ✗
Microsoft Entra Connect Health
Why it's wrong here
Microsoft Entra Connect Health monitors the availability, health, and performance of hybrid identity infrastructure, including AD FS, AD DS, and Microsoft Entra ID Connect synchronization. It provides alerts, usage analytics, and insights about sign-in failures, but it does not execute any user lifecycle workflows or automate changes to user objects. Thus, Connect Health is a telemetry and monitoring service, not a tool for automating joiner, mover, or leaver processes.
Go deeper
Related to this question
About these practice questions
One of 795 original AZ-305 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-305 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-305 exam.