A retired agent must no longer authenticate or access Microsoft 365. What lifecycle step?
Select an answer to reveal the explanation.
Short Explanation and Infographic
Retire means kill the identity and strip access — not a cosmetic rename with Global Admin still attached.
Full explanation below image
Full Explanation
Correct Answer — A
Agent identity lifecycle includes secure decommissioning so retired agents cannot continue to access resources.
Why B is wrong: Maintains maximum risk.
Why C is wrong: Secret exposure.
Why D is wrong: Rename without access removal is insufficient.
Exam tip: Retired agent → decommission Agent ID + remove access.