Top 3 Microsoft Entra ID Governance Features for Access Recertification and Lifecycle Management
You are deploying Microsoft Entra ID Governance. Which THREE capabilities should you include to meet compliance requirements for access recertification and lifecycle management?
Quick Answer
The answer is Entitlement Management, Access Reviews, and Lifecycle Management workflows. These three capabilities form the core of Microsoft Entra ID Governance for access recertification and lifecycle management because they automate the entire process from provisioning to periodic attestation and deprovisioning. Entitlement Management enables governed access packages and automated assignment, while Access Reviews provide recurring attestation workflows for group memberships, application roles, and privileged groups, creating a clear audit trail for compliance with regulations like SOX, GDPR, or HIPAA. Lifecycle Management workflows handle joiner-mover-leaver scenarios, ensuring access is automatically granted or revoked based on HR triggers. On the MS-102 exam, this question tests your ability to distinguish governance features from broader identity features like Conditional Access or Identity Protection—a common trap is selecting Azure AD roles or PIM instead of Lifecycle Management. Remember the mnemonic "EAL" for Entitlement, Access Reviews, and Lifecycle Management to lock in the three pillars of recertification and lifecycle control.
⚠ Common exam trap
Watch out — candidates often confuse Identity Protection's risk-based conditional access with governance recertification, or assume B2B Collaboration covers lifecycle management, when in fact only Access Reviews, Lifecycle Workflows, and Entitlement Management directly address compliance-driven access recertification and lifecycle automation.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Access Reviews
Access Reviews (B) are a core capability of Microsoft Entra ID Governance that directly enables compliance-driven access recertification. They allow administrators to create recurring reviews of group memberships, application assignments, and privileged roles, ensuring that only authorized users retain access. This satisfies regulatory requirements like SOX, GDPR, or HIPAA by providing attestation workflows and audit trails.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Identity Protection
Why it's wrong here
Identity Protection is for risk detection, not governance.
- ✓
Access Reviews
Why this is correct
Access Reviews allow periodic recertification of access.
- ✗
B2B Collaboration
Why it's wrong here
B2B Collaboration is for inviting external users, not governance workflows.
- ✓
Lifecycle Workflows
Why this is correct
Lifecycle Workflows automate joiner/mover/leaver processes.
- ✓
Entitlement Management
Why this is correct
Entitlement Management manages access packages and catalogs.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
About these practice questions
This MS-102 question is part of Courseiva's 241-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
Same concept, more angles
1 more way this is tested on MS-102
These questions test the same concept from different angles. Work through them to make sure you can recognise it however the exam phrases it.
Variation 1. Which THREE are features of Microsoft Entra ID Governance? (Choose three.)
hard- A.Password protection
- ✓ B.Entitlement management
- C.Conditional access policies
- ✓ D.Access reviews
- ✓ E.Privileged Identity Management (PIM)
Why B: Entitlement management is a core feature of Microsoft Entra ID Governance that enables organizations to manage the lifecycle of access for internal and external users through access packages, catalogs, and policies. It automates access requests, approvals, and assignments, ensuring users have the right access to resources like groups, apps, and SharePoint sites.
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.