Tailwind Traders requires Exchange Administrator to be eligible only, with manager approval and 4-hour max activation. What should be configured?
Select an answer to reveal the explanation.
Short Explanation and Infographic
PIM is just-in-time admin: eligible until needed, approval, clock, then expire.
Full explanation below image
Full Explanation
Correct Answer — B
PIM eligible roles support approval, justification, MFA on activation, and max duration. Standing Global Admin violates least privilege. Disabling MFA increases risk. Site collection admin isn't tenant Exchange role governance.
Exam tip: Approval + time-bound privilege → PIM eligible.