Câu 6: SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

You have two management groups named MG1 and MG2 that contain multiple Azure subscriptions. The subscriptions are linked to a Microsoft Entra tenant. You have a user named User1 and a global administrator named Admin1. You are informed that User1 created an Azure subscription named Sub1 under the MG2 management group and is the only owner of the subscription. You need to ensure that Admin1 can remove the Owner role from User1 for Sub1. What should you do first?

1. A. Move Sub1 to MG1.
2. B. Assign Admin1 the User Access Administrator role for Sub1.
3. C. Instruct Admin1 to use Privileged Identity Management (PIM) to request the Security Administrator role.
4. D. Instruct Admin1 to enable Access management for Azure resources. — đáp án hiện tại