A security team is implementing Entra ID PIM access reviews for the 'Cognitive Services Contributor' role. The review is quarterly, and active role assignments that are not reviewed within 30 days should be automatically removed. The security team also wants to require a justification from the reviewers. Which PIM access review settings achieve this?
Select an answer to reveal the explanation.
Short Explanation
You want quarterly reviews, a 30-day review window, automatic removal when reviewers don't respond, and reviewer justification. That's exactly the setting that uses quarterly recurrence, a 30-day duration, 'Remove access' for non-responses, and 'Require justification from reviewer.'
Full Explanation
The configuration that sets review recurrence to quarterly, duration to 30 days, 'If reviewers don't respond' to 'Remove access,' and enables 'Require justification from reviewer' is correct because Microsoft Entra PIM access reviews for roles support all the required settings: quarterly recurrence for the review schedule, a 30-day review duration after which non-responses are acted upon, 'Remove access' as the action when reviewers don't respond so unreviewed assignments are removed automatically, and 'Require justification from reviewer' so reviewers must provide a business reason when approving continued access. The monthly recurrence, 7-day duration, and reminder emails option is wrong because monthly recurrence is more frequent than quarterly and mismatches the requirement, and 7 days is too short for the specified 30-day window. The PIM role expiration to 90 days without an access review option is wrong because role expiration without access reviews removes the certification process where reviewers confirm continued need; it is time-bound auto-removal, not a periodic review with human judgment. The quarterly recurrence with 'Approve access' for non-respondents and a 30-day duration option is wrong because 'Approve access' for non-respondents is the opposite of the requirement; it keeps access for users whose need was not confirmed by a reviewer.