MS-102 Practice Question: Implement and manage Microsoft Entra identity and access
Your organization uses Microsoft Entra ID Governance. You need to implement an access review for all users who have access to a critical application. The review must be recurring every quarter and require reviewers to provide a justification for their decisions. Which access review settings should you configure?
⚠ Common exam trap
The trap here is that candidates may focus solely on the frequency requirement and overlook the justification requirement, selecting Option A because it matches 'Quarterly' but ignores the mandatory justification setting.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Frequency: Quarterly, Justification required: Yes
The requirement specifies a quarterly recurring access review with mandatory justification. In Microsoft Entra ID Governance, the 'Frequency' setting controls the recurrence interval (e.g., Quarterly), and the 'Justification required' toggle enforces that reviewers must provide a reason for their decision. Setting 'Justification required' to 'Yes' ensures compliance with audit and governance policies.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Frequency: Quarterly, Justification required: No
Why it's wrong here
This option matches the required Quarterly frequency, but it incorrectly disables the 'Justification required' setting in Microsoft Entra ID Governance. The organization's policy explicitly requires justification, meaning reviewers must document a reason for each access decision. Without justification, the review cannot produce an auditable attestation trail, and the setting should be Yes to meet governance and compliance requirements.
- ✓
Frequency: Quarterly, Justification required: Yes
Why this is correct
This combination is correct because it satisfies both core requirements: the access review recurrence is set to Quarterly, matching the mandated cadence, and 'Justification required' is enabled. In Microsoft Entra ID Governance, enabling justification forces reviewers to enter a rationale for each approval or denial, which is captured in the review logs and used for compliance evidence. This exactly aligns with the organization's attestation policy.
- ✗
Frequency: Annually, Justification required: Yes
Why it's wrong here
While justification is enabled, the access review recurrence is set to Annually, which falls short of the required Quarterly frequency. In Microsoft Entra ID Governance, the recurrence determines how often a new review instance is generated; an annual interval leaves access unverified for up to a year, increasing the risk of stale or excessive permissions. This fails the organization's explicit requirement for quarterly reviews, making the option invalid.
- ✗
Frequency: Monthly, Justification required: Yes
Why it's wrong here
Although justification is enabled, the Monthly frequency exceeds the required Quarterly cadence, which does not match the organization's stated policy. Running more frequent access reviews in Microsoft Entra ID Governance creates additional review instances and can lead to reviewer fatigue, potentially degrading the quality of decisions. Since the requirement is quarterly, this over-provisioning of review cycles is not the correct configuration.
Go deeper
Related to this question
Learn chapter
Microsoft Entra Application Proxy
Key term
Compliance
Compliance is the process of ensuring that an organization follows laws, regulations, standards, and internal policies that apply to its operations and data handling.
Key term
Audit
An audit is a systematic, independent review of IT systems, processes, and controls to verify compliance with policies, standards, and regulations.
About these practice questions
Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.