Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 364 discussion

Actual exam question from Microsoft's MS-102

Question #: 364
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure a Multifactor authentication registration policy that has the following settings:

• Assignments:
o Include: Group1
o Exclude: Group2
• Controls: Require Microsoft Entra ID multifactor authentication registration
• Policy enforcement: Enabled

You create a conditional access policy that has the following settings:

• Name: Policy1
• Assignments:
o Include: Group2
o Exclude: Group1
• Grant: Require multifactor authentication
• Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by GetEsn at Oct. 16, 2024, 4:22 p.m.

Comments

Submit Cancel

JohnDoe47

Highly Voted 9 months, 2 weeks ago

This question is identical to question 247 No: He gets a registration prompt next time. BUT he can postpone registration No: He is excluded from both policies (exclude overrules include) Yes: He is included in the Conditional Access Policy

upvoted 11 times

rezarules

2 months, 4 weeks ago

correct, but user 2 has already MFA enabled. Even if he was not excluded, he still would not require to register during next sign in as he already has MFA enabled

upvoted 1 times

...

GetEsn

Highly Voted 10 months ago

Y-N-Y User 3 : => Group 2 is excluded of Assignments But the Policy 1 require MFA, so the next time, User 3 will be required to register

upvoted 5 times

fabiomartinsnet

4 months, 1 week ago

Yes: MFA Policy. No: MFA is already enabled. Yes: CA policy.

upvoted 3 times

...

3abmula

9 months, 1 week ago

First one is No, User1 is excluded from CA policy, and only included in MFA registration policy which will not enforce user to register MFA on the next sign-in, registration can be skipped for 14 days. https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-mfa-policy#user-experience

upvoted 2 times

...

koopb

Most Recent 1 week, 5 days ago

Y/N/Y There is no nothing written about a timeline so we are not sure if user 1 can postpone or not.

upvoted 1 times

...

Krayzr

7 months, 1 week ago

N-Y-Y Same question: https://www.examtopics.com/discussions/microsoft/view/58278-exam-ms-100-topic-4-question-69-discussion/

upvoted 1 times

Krayzr

6 months, 3 weeks ago

Sorry there is a difference Required to REGISTER vs Required to USE

upvoted 1 times

...

justITtopics

9 months, 1 week ago

Let me know if I'm wrong! Who manage the required registration of the MFA is the "Multifactor authentication registration policy". The "conditional access policy" will only allow the access or not if you have this requeriment, but it will not require the MFA registration. N-N-N User 1 is in scope for requiring registration, but is not required for MFA yet, so user can bypass: User 2 is already enabled. User 3 is in group 2, excluded for the MFA registration.

upvoted 3 times

...

hola1010

9 months, 2 weeks ago

N-N-N User 1 is in scope for requiring registration, but is not required for MFA so user can bypass: Microsoft Entra ID Protection will prompt your users to register the next time they sign in interactively and they'll have 14 days to complete registration. During this 14-day period, they can bypass registration if MFA isn't required as a condition, but at the end of the period they're required to register before they can complete the sign-in process. User 2 is already enrolled. User 3 is out of scope of policies.

upvoted 2 times

hola1010

9 months, 2 weeks ago

Actually , N-N-Y . User 3 is in scope and "required for MFA"

upvoted 4 times

BigO76

7 months ago

the question is "will be required to REGISTER for MFA on the next sign-in" so User 3 Excluded by Group2 → Not required to register for MFA.

upvoted 2 times

...