exam questions

Exam AZ-300 All Questions

View all questions & answers for the AZ-300 exam

Exam AZ-300 topic 1 question 8 discussion

Actual exam question from Microsoft's AZ-300
Question #: 8
Topic #: 1
[All AZ-300 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings to the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
References:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
SilentH
Highly Voted 5 years, 3 months ago
The answer is correct and you can look at https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-azure-management for a specific example to the Azure portal.
upvoted 21 times
...
superbutt
Highly Voted 5 years, 3 months ago
The answer is correct. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies
upvoted 12 times
...
tashakori
Most Recent 1 year, 1 month ago
Given answer is correct
upvoted 1 times
...
sh0wbi
4 years, 7 months ago
came in exam 23-sep, 2020
upvoted 1 times
...
MMohammad
4 years, 7 months ago
You will use the Users and Groups section to choose the group. You would then choose the Cloud Apps or actions section to ensure that the setting is enforced during the use of accessing the Azure Portal. And then you would use the Grant section to enforce Multi-Factor Authentication.
upvoted 3 times
...
MMohammad
4 years, 7 months ago
The correct answer is: . User and groups . Cloud apps . Grant
upvoted 2 times
...
tundervirld
4 years, 8 months ago
The question says three options, conditions is a good option too, but it is to set restrictions and in this case we can set MFA without set conditions. So the answer provided is right.
upvoted 1 times
...
JitheshT
4 years, 8 months ago
Answer is correct: You will use the Users and Groups section to choose the group. You would then choose the Cloud Apps or actions section to ensure that the setting is enforced during the use of accessing the Azure Portal. And then you would use the Grant section to enforce Multi-Factor Authentication
upvoted 2 times
...
Yu001
4 years, 8 months ago
usera nad groups, apps , grant
upvoted 1 times
...
Kamal_SriLanka
4 years, 9 months ago
users and groups Cloud apps Conditions Grant
upvoted 1 times
...
Harkonnen
4 years, 9 months ago
The asnwer is CORRECT. Please update the solution URL to: https://docs.microsoft.com/en-us/azure/role-based-access-control/conditional-access-azure-management The Cloud option should be selected to set up Cloud App "Microsoft Azure Management" Azure portal Azure Resource Manager provider Classic Service Management APIs Azure PowerShell Visual Studio subscriptions administrator portal Azure DevOps Azure Data Factory portal Then, the particular policy would apply to the Portal.
upvoted 2 times
...
memyself2
4 years, 9 months ago
I had this question on my AZ-103 exam in july 2020 This should be correct. Conditions are basically what-ifs, also based of this link, no condition would be needed for this scenario. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions
upvoted 1 times
...
Dineshvishe
4 years, 9 months ago
Mentioned answer is correct : Below is the explaination Sign in to the Azure portal as a global administrator, security administrator, or Conditional Access administrator. Browse to Azure Active Directory > Security > Conditional Access. Select New policy. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. Under Assignments, select Users and groups,<--------------------- Under Include, select All users. Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts. Select Done. Under Cloud apps or actions > Include, select Select apps, choose Microsoft Azure <-------Management, and select Select then Done. Under Conditions > Client apps (Preview), set Configure to Yes, and select Done. Under Access controls > Grant, select Grant access, Require multi-factor authentication, and select Select.<-------------------- Confirm your settings and set Enable policy to On. Select Create to create to enable your policy.
upvoted 4 times
...
gboyega
4 years, 9 months ago
given answer is correct
upvoted 4 times
...
YPR
4 years, 10 months ago
Given answer is correct
upvoted 5 times
...
[Removed]
4 years, 11 months ago
The given answer is correct...The Client Apps in Condition is in preview...hence you can configure the same in Access control as well
upvoted 2 times
...
mukulag
4 years, 11 months ago
https://docs.microsoft.com/en-in/azure/active-directory/conditional-access/howto-conditional-access-policy-azure-management Users and groups Cloud apps or actions Conditions Grant Under Assignments, select Users and groups Under Include, select All users. Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts. Select Done. Under Cloud apps or actions > Include, select Select apps, choose Microsoft Azure Management, and select Select then Done. Under Conditions > Client apps (Preview), set Configure to Yes, and select Done. Under Access controls > Grant, select Grant access, Require multi-factor authentication, and select Select.
upvoted 2 times
[Removed]
4 years, 10 months ago
You do not need any client apps here, hence The conditions step is not required.
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago