Exam MS-102 topic 1 question 28 discussion

- Notification to Microsoft Authenticator app - 14 days https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/security-defaults#authentication-methods

Correct. the user can use the following multi-factor authentication (MFA) methods when signing in to the tenant for the first time: - Microsoft Authenticator app - SMS - Voice call The user has 14 days to register for MFA after the first sign-in1

Outdated. From Microsoft Docs (https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults#require-all-users-to-register-for-microsoft-entra-multifactor-authentication): "Starting July 29, 2024, new tenants and existing tenants had the 14-day grace period for users to register for MFA removed. We are making this change to help reduce the risk of account compromise during the 14-day window, as MFA can block over 99.2% of identity-based attacks. " Correct answers: 1. Notification to Microsoft Authenticator app 2. 0 days

Copilot says : With Enable Security defaults set to Yes in a new Microsoft 365 E5 tenant, when a user signs in for the first time, they can use the Microsoft Authenticator app as their multi-factor authentication (MFA) method1. The user has 14 days to register for MFA from the first time they sign in after security defaults have been enabled2. After the 14-day period, if the user has not completed the MFA registration, they will not be able to sign in until the registration is completed

MS auth app is the DEFAULT Microsoft want us to use. You have the ability to setup SMS, email, voice call etc but the AUTHENTICATOR APP is MS's recommendation and automatically defaulted in every tenant unless specified otherwise.

- MS Auth App - 14 Days is the default