AZ-900 Describe Azure management and governance Practice Question
Which Azure feature enables organizations to review and recertify privileged role assignments on a scheduled basis?
⚠ Common exam trap
It's easy for candidates to confuse Azure AD Access Reviews (which handle scheduled recertification of identities) with Azure RBAC audit logs or Policy compliance, which focus on resource-level activity and configuration governance rather than identity lifecycle management.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Azure AD Access Reviews
Azure AD Access Reviews allow administrators to configure periodic reviews of privileged role assignments, ensuring that only authorized users retain access. This feature directly supports recertification workflows by sending reviewers notifications and automatically removing stale assignments based on policy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Azure AD Privileged Identity Management role history
Why it's wrong here
Azure AD Privileged Identity Management (PIM) role history provides an audit trail of privileged role activations, including timestamps and justifications, but it does not trigger any periodic review or recertification. It is a passive log, whereas Azure AD Access Reviews actively schedule recurring attestation by owners, ensuring that only currently justified role assignments persist. The existence of a history alone does not enforce removal of stale or unnecessary privileged access.
- ✓
Azure AD Access Reviews
Why this is correct
Azure AD Access Reviews are the correct feature for periodically recertifying privileged roles and group memberships. Administrators can configure recurrence, assign reviewers, and automatically remove users whose access is not affirmed, enforcing the principle of least privilege. Unlike passive audits or activation logs, Access Reviews require humans to actively certify business need, with results applied to keep identity assignments current and compliant.
- ✗
Azure RBAC audit logs
Why it's wrong here
Azure RBAC audit logs record who has what role assignments and when those assignments changed, but they simply aggregate historical data for forensic analysis. They do not prompt anyone to revalidate whether access is still required; uncertified access remains indefinitely within the log's view. Access Reviews, in contrast, transform that static visibility into an actionable, recurring workflow that removes access without proper certification.
- ✗
Azure Policy RBAC compliance
Why it's wrong here
Azure Policy enforces organizational standards on Azure resources, such as requiring specific resource types or tags, and its RBAC compliance aspects assess whether resource configurations adhere to policy definitions. It does not evaluate or govern identity assignments for users or groups, and it cannot initiate a workflow to confirm an individual's continued need for a role. Access Reviews operate in Azure AD identity governance, a separate plane from resource-level policy compliance.
Go deeper
Related to this question
Learn chapter
Azure Cost Management and Billing
Key term
Feature
A feature is a distinct unit of functionality that delivers value to the user, often managed and tracked throughout the software development lifecycle.
Key term
Role
A role is a named set of permissions that can be assigned to users or groups to control access to resources in an IT environment.
About these practice questions
Courseiva writes every AZ-900 question from scratch — 981 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This AZ-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the AZ-900 exam.