Your organization requires administrator accounts to use MFA, 20-character complex passwords rotated every 180 days, and management via Privileged Identity Management (PIM). You receive alerts about administrators who have not changed their password in the last 90 days. Which PIM alert should you modify to reduce those alerts?
Choose an answer
Tap an option to check your answer.
Correct answer: Potential stale accounts in a privileged role.
Why this is the answer
The "Potential stale accounts in a privileged role" alert identifies privileged accounts that have not had their password changed for a configurable duration. Since the organization requires password rotation every 180 days and you're receiving alerts for passwords not changed in 90 days, this PIM alert is directly responsible. Modifying its threshold will align it with your organization's policy, reducing irrelevant alerts. "Roles are being assigned outside of Privileged Identity Management" alerts on unauthorized role assignments, not password age. "Roles don't require multi-factor authentication for activation" relates to MFA enforcement, not password complexity or rotation. "Administrators aren't using their privileged roles" tracks role usage, not password hygiene.
Pass your exam — without the endless answer hunt
Get every verified question and explanation for this exam in one place, and save hours of prep. 1,000+ certifications · 20+ languages · free to start.
Pass your exam faster → No card needed