Plan, implement, and manage access reviews in Microsoft Entra
Objective access.reviews sits in Plan and automate identity governance, which carries 28% of the Identity and Access Admin exam. The questions below are original, written from the official objective title above, and each explanation cites the Microsoft Azure page it rests on.
Objective title verbatim from the official objectives. Microsoft Azure exam page ↗
A worked example
Shown solved, with the whole explanation open: this is what every question here carries.
A B2B collaboration tenant has hundreds of guest accounts added to Microsoft 365 groups over time. The identity team wants a recurring process that has reviewers recertify each guest's continued need for access, with AI-powered suggestions to assist reviewers, and automatic removal of guests whose access is denied. Which capability should they configure?
The concept
Access reviews automate recurring recertification of existing guest access and use AI-powered suggestions to help reviewers decide, removing identities when access is denied or no longer needed.
Why this answer
Access reviews scoped to the group memberships directly matches the described scenario: recurring review of existing guests, AI-assisted decisions, and automatic removal on denial.
- Correct: this is the feature purpose-built for recurring recertification of existing guest access with AI-powered reviewer suggestions.
- BAccess packages govern how new guests request and are granted access initially, not recurring recertification of guests already in the directory.
- CLifecycle workflows automate tasks tied to lifecycle events like joiner or leaver status, not recurring access recertification decisions by reviewers.
- DPIM role reviews recertify privileged role assignments, not general guest group membership, so it does not fit this scenario.
- ETerms of use policies require agreement before sign-in but do not provide recurring recertification or removal of unneeded guest access.
Now you: objective access.reviews questions
No account needed. The explanation opens when you answer.
Sample question 1 of 3
An organization has many guest users already present in its directory from past projects. Security wants recurring reviews that automatically remove guests who no longer need access, using AI-generated suggestions to help reviewers decide. Which capability should be configured?
Sample question 2 of 3
Which situation is named as a good reason to run an access review?
Sample question 3 of 3
What does the convenience of self-service access create a need for?
Full Identity and Access Admin question bank coming
We’re writing the complete bank from the official objectives right now. Leave your email and we’ll tell you when it ships, nothing else, ever.
Read the sources
These are the official pages the questions above cite. Reading them is studying the objective from the primary source, which is what the explanations point you toward anyway.