Exam MS-102 topic 1 question 169 discussion

Actual exam question from Microsoft's MS-102

Question #: 169
Topic #: 1

You have a Microsoft 365 E5 subscription.

You create a Conditional Access policy that blocks access to an app named App1 when users trigger a high-risk sign-in event.

You need to reduce false positives for impossible travel when the users sign in from the corporate network.

What should you configure?

A. exclusion groups
B. multi-factor authentication (MFA)
C. named locations
D. user risk policies

Show Suggested Answer

Suggested Answer: C 🗳️

by [deleted] at Sept. 20, 2023, 1:52 p.m.

Comments

Submit Cancel

Vaerox

Highly Voted 1 year, 6 months ago

Selected Answer: C

Answer given seems correct. Take a look at this article: https://www.petervanderwoude.nl/post/conditional-access-and-named-locations/ " Named locations is a feature of Azure AD that enables administrators to label trusted IP address ranges in their organizations. In the environment, administrators can use named locations in the context of the detection of risk events to reduce the number of reported false positives for the Impossible travel to atypical locations risk event type. "

upvoted 7 times

...

Lekso

Most Recent 4 months, 3 weeks ago

Selected Answer: D

I disagree, I strongly believe D is the answer because signing from a Name location alone does not eliminate Identity and password being compromised which will constitute a User highly risk. User risk polices is the solution

upvoted 2 times

...

dado11

10 months, 3 weeks ago

Named Location

upvoted 2 times

...

Amir1909

1 year, 6 months ago

C is correct

upvoted 1 times

...

Festus365

1 year, 8 months ago

Can I get more evidence to this answer C: named locations

upvoted 1 times

coyoteee

1 year, 8 months ago

he add corporate network address as C: named locations and i guess user login from that address more oftne so user doest trigger the high risk sign in

upvoted 1 times

...