MENU
What should you use to ensure that the members of an Azure Active Directory group use multi-factor authentication (MFA) when they sign in?
Suggested Answer: B
Get Premium SC-900 Questions
as Interactive Web-Based Practice Test or PDF
Real Exam Format
Detailed Explanations
Instant Access
Get Your Practice Test
The recommended way to enable and use Azure AD Multi-Factor Authentication is with Conditional Access policies. Conditional Access lets you create and define policies that react to sign-in events and that request additional actions before a user is granted access to an application or service.
14 comments · newest first
PO
Polly
11 months ago
Azure RBAC doesn't handle MFA, just access control!
CI
Ciara
11 months ago
Wait, can you really enforce MFA with just a policy? Sounds too easy.
SH
Shaniqua
12 months ago
Conditional access is the best choice here, no doubt!
ST
Starr
12 months ago
I thought Azure AD Identity Protection was the way to go?
BE
Beula
1 year ago
Definitely need a conditional access policy for MFA!
RU
Ruth
1 year ago
I thought PIM was for managing privileged access, so I don't think that's the right choice for enforcing MFA.
RE
Renea
1 year ago
I’m leaning towards option B too, but I also recall something about Azure RBAC being related to permissions, not MFA.
AS
Ashton
1 year ago
I remember something about Azure AD Identity Protection, but it feels like that was more about risk detection than enforcing MFA.
RE
Rene
1 year ago
I think it might be a conditional access policy, but I'm not entirely sure. We practiced that in class, right?
VI
Virgie
1 year ago
Hmm, this is a tricky one. I'm not entirely confident, but I think the objective might be to create the plan to deliver the project product, so I'll select option A.
EL
Ellen
1 year ago
Hmm, I'm a bit unsure here. Should we really focus on the risk threshold first? Establishing the report format required by the client seems like it could be just as important to get right from the start.
LI
Lilli
1 year ago
Okay, I think I know the answer. Let me double-check the options.
KI
Kimbery
1 year ago
I'm pretty confident it's VNI too, especially since there was a practice question that mentioned VNIs as identifiers for segments in VXLAN.
LA
Lauran
1 year ago
The "mgmt" tenant sounds like it could be the right answer, but I'll need to review my notes to confirm that.