According to the Microsoft Identity and Access Administrator (SC-300) study materials and Microsoft Learn module: "Manage permissions across multicloud environments" , Microsoft Entra Permissions Management is the dedicated solution for unified Cloud Infrastructure Entitlement Management (CIEM)
. It enables organizations to discover, remediate, and continuously monitor permission risks across Azure , AWS , and Google Cloud Platform (GCP) environments.
Entra Permissions Management automatically integrates with multicloud environments through read-only connectors, allowing you to assess permissions, identify excessive privilege assignments, and recommend least-privilege configurations. It provides a Permissions Creep Index (PCI) score that quantifies risk, helping administrators maintain a principle of least privilege across all platforms - while minimizing manual effort through automated analysis and unified dashboards.
In contrast, Microsoft Defender for Cloud Apps focuses on app discovery and data protection, not infrastructure entitlement management. Microsoft Entra ID Protection monitors risky sign-ins and identities only within Entra ID, while Microsoft Sentinel provides security information and event management (SIEM) but does not evaluate privilege assignments directly.
Therefore, the verified recommendation from the official Microsoft documentation is to use Microsoft Entra Permissions Management for unified, automated privilege risk assessment across Azure, AWS, and GCP.
# Correct Answer: D. Microsoft Entra Permissions Management