Exam MS-500 topic 1 question 77 discussion

Actual exam question from Microsoft's MS-500

Question #: 77
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription.

You need to create a conditional access policy named Policy1 that meets the following requirements:

• Enforces multi-factor authentication (MFA)
• Requires that users reauthenticate after eight hours

Which settings should you configure in Policy1 for each requirement? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by MoritzW at March 6, 2023, 5:09 p.m.

Comments

Submit Cancel

EetswahBah

2 years, 1 month ago

1. Grant 2. Session

upvoted 1 times

...

T3st3r

2 years, 2 months ago

1. Grant 2. Session

upvoted 2 times

AnonymousJhb

2 years, 2 months ago

Grant as per https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa#create-a-conditional-access-policy

upvoted 1 times

...

RomanV

2 years, 2 months ago

1. Conditions 2. Session Don't believe me? Try it out in the Azure admin portal.

upvoted 1 times

RomanV

2 years, 2 months ago

To prove my point for the disbelievers out here: For answer 2 Session: Sign-in frequency control 1. Browse to Azure Active Directory > Security > Conditional Access. 2. Select New policy. 3. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. 4. Choose all required conditions for customer’s environment, including the target cloud apps. 5. Under Access controls > Session. - Select Sign-in frequency. - Choose Periodic reauthentication and enter a value of hours or days or select Every time. 6.Save your policy.

upvoted 1 times

...

MoritzW

2 years, 4 months ago

I think the first answer should be Conditions

upvoted 2 times

kmk_01

2 years, 3 months ago

From https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa Under Access controls > Grant, select Grant access, Require multifactor authentication, and select Select.

upvoted 1 times

RomanV

2 years, 2 months ago

Incorrect. "Grant" is for RISKY USERS as stated by Microsoft under "Sign-in frequency control every time risky user" Source: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-session-lifetime

upvoted 1 times

...