Microsoft Azure Security Technologies (AZ-500)

Which PIM alert should you modify to address alerts for administrators not changing their passwords?

1. Roles are being assigned outside of Privileged Identity Management

2. Roles don't require multi-factor authentication for activation

3. Administrators aren't using their privileged roles

4. Potential stale accounts in a privileged role

The correct answer is: Potential stale accounts in a privileged role

The selection to modify the alert concerning administrators not changing their passwords aligns with managing potential stale accounts in a privileged role. When privileged accounts are left unattended or inactive for prolonged periods, they raise security concerns, primarily if passwords are not regularly updated. Monitoring for stale accounts is crucial because these accounts can be vulnerable to unauthorized access or exploitation by malicious actors, especially if they maintain older, potentially compromised passwords. By addressing this alert, organizations can ensure that appropriate actions are taken to deactivate or monitor accounts that have not been utilized, thereby mitigating risks associated with stale credentials. This proactive approach aids in enforcing better governance over privileged identities and aligns with best practices for maintaining security in Azure Privileged Identity Management (PIM) settings.