Download Designing Microsoft Azure Infrastructure Solutions.AZ-305.Dump4Pass.2024-01-17.205q.vcex

Scenario: Once App1 is migrated to Azure, you must ensure that new data can be written to the app, and the modification of new and existing data is prevented for a period of three years.    As an administrator, you can lock a subscription, resource group, or resource to prevent other users in your organization from accidentally deleting or modifying critical resources. The lock overrides any permissions the user might have.    Reference: https://docs.microsoft.com/en-us/azure/azure-resource-manager/management/lock-resources

  

   

Requirements: Identity Requirements Contoso identifies the following requirements for managing Fabrikam access to resources: Every month, an account manager at Fabrikam must review which Fabrikam users have access permissions to App1. Accounts that no longer need permissions must be removed as guests.  The solution must minimize development effort.    Box 1: The Azure AD Privileged Identity Management (PIM) When should you use access reviews?  Too many users in privileged roles: It's a good idea to check how many users have administrative access, how many of them are Global Administrators, and if there are any invited guests or partners that have not been removed after being assigned to do an administrative task. You can recertify the role assignment users in Azure AD roles such as Global Administrators, or Azure resources roles such as User Access Administrator in the Azure AD Privileged Identity Management (PIM) experience.    Box 2: Access reviews Azure Active Directory (Azure AD) access reviews enable organizations to efficiently manage group memberships, access to enterprise applications, and role assignments. User's access can be reviewed on a regular basis to make sure only the right people have continued access.    Reference: https://docs.microsoft.com/en-us/azure/active-directory/governance/access-reviews-overview