exam questions

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 364 discussion

Actual exam question from Microsoft's MS-102
Question #: 364
Topic #: 1
[All MS-102 Questions]

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.



You configure a Multifactor authentication registration policy that has the following settings:

• Assignments:
o Include: Group1
o Exclude: Group2
• Controls: Require Microsoft Entra ID multifactor authentication registration
• Policy enforcement: Enabled

You create a conditional access policy that has the following settings:

• Name: Policy1
• Assignments:
o Include: Group2
o Exclude: Group1
• Grant: Require multifactor authentication
• Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer Hide Answer
Suggested Answer:

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
JohnDoe47
Highly Voted 5 months, 3 weeks ago
This question is identical to question 247 No: He gets a registration prompt next time. BUT he can postpone registration No: He is excluded from both policies (exclude overrules include) Yes: He is included in the Conditional Access Policy
upvoted 8 times
...
Krayzr
Most Recent 3 months, 2 weeks ago
N-Y-Y Same question: https://www.examtopics.com/discussions/microsoft/view/58278-exam-ms-100-topic-4-question-69-discussion/
upvoted 1 times
Krayzr
3 months ago
Sorry there is a difference Required to REGISTER vs Required to USE
upvoted 1 times
...
...
justITtopics
5 months, 2 weeks ago
Let me know if I'm wrong! Who manage the required registration of the MFA is the "Multifactor authentication registration policy". The "conditional access policy" will only allow the access or not if you have this requeriment, but it will not require the MFA registration. N-N-N User 1 is in scope for requiring registration, but is not required for MFA yet, so user can bypass: User 2 is already enabled. User 3 is in group 2, excluded for the MFA registration.
upvoted 3 times
...
hola1010
6 months ago
N-N-N User 1 is in scope for requiring registration, but is not required for MFA so user can bypass: Microsoft Entra ID Protection will prompt your users to register the next time they sign in interactively and they'll have 14 days to complete registration. During this 14-day period, they can bypass registration if MFA isn't required as a condition, but at the end of the period they're required to register before they can complete the sign-in process. User 2 is already enrolled. User 3 is out of scope of policies.
upvoted 2 times
hola1010
6 months ago
Actually , N-N-Y . User 3 is in scope and "required for MFA"
upvoted 4 times
BigO76
3 months, 1 week ago
the question is "will be required to REGISTER for MFA on the next sign-in" so User 3 Excluded by Group2 → Not required to register for MFA.
upvoted 2 times
...
...
...
GetEsn
6 months, 2 weeks ago
Y-N-Y User 3 : => Group 2 is excluded of Assignments But the Policy 1 require MFA, so the next time, User 3 will be required to register
upvoted 4 times
fabiomartinsnet
3 weeks, 3 days ago
Yes: MFA Policy. No: MFA is already enabled. Yes: CA policy.
upvoted 1 times
...
3abmula
5 months, 3 weeks ago
First one is No, User1 is excluded from CA policy, and only included in MFA registration policy which will not enforce user to register MFA on the next sign-in, registration can be skipped for 14 days. https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-mfa-policy#user-experience
upvoted 2 times
...
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago