Discuss Microsoft SC-900 Exam Topic 16 Question 6

When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

AAll users must authenticate from a registered device.

BAdministrators must always use Azure Multi-Factor Authentication (MFA).

CAzure Multi-Factor Authentication (MFA) registration is required for all users.

DAll users must authenticate by using passwordless sign-in.

EAll users must authenticate by using Windows Hello.

Suggested Answer: B, C

Security defaults make it easy to protect your organization with the following preconfigured security settings:

Requiring all users to register for Azure AD Multi-Factor Authentication.

Requiring administrators to do multi-factor authentication.

Blocking legacy authentication protocols.

Requiring users to do multi-factor authentication when necessary.

Protecting privileged activities like access to the Azure portal.

https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

Get Premium SC-900 Questions as Interactive Web-Based Practice Test or PDF Real Exam Format Detailed Explanations Instant Access Get Your Practice Test

12 comments · newest first

Micaela 11 months ago

D and E seem unnecessary for most users.

Mozell 12 months ago

A is not a requirement, just a recommendation.

Lemuel 12 months ago

Wait, are all users really required to register for MFA? Sounds a bit extreme.

Latia 1 year ago

Totally agree with B! MFA is a must for admins.

Josefa 1 year ago

B and C are the correct answers.

Sherrell 1 year ago

I feel like there was something about registered devices, but I can't recall if it was mandatory for all users or just a specific group.

Paris 1 year ago

I remember practicing a question about security defaults, and I think it mentioned that MFA registration is required for all users. That sounds right to me.

Judy 1 year ago

I think one of the requirements is that administrators must always use Azure MFA, but I'm not completely sure if that's the only one.

Nieves 1 year ago

I don't think passwordless sign-in is enforced for all users, but I could be wrong. I remember it being a part of some discussions.

Ariel 1 year ago

The IAM operator is used for managing AWS Identity and Access Management (IAM) resources, so that's probably not the right answer here. I'm leaning towards the Operand Deployment Lifecycle Manager as the most likely solution for this question.

Marilynn 1 year ago

This one seems pretty straightforward. I'm pretty sure the Pareto Principle is the concept they're looking for here.

Hubert 1 year ago

I remember that infant industries often need protection until they can compete. So, I think A might be a strong choice.

Microsoft SC-900 Exam - Topic 16 Question 6 Discussion