Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 364 discussion

Actual exam question from Microsoft's MS-102

Question #: 364
Topic #: 1

HOTSPOT
-

You have a Microsoft 365 E5 subscription that contains the users shown in the following table.

You configure a Multifactor authentication registration policy that has the following settings:

• Assignments:
o Include: Group1
o Exclude: Group2
• Controls: Require Microsoft Entra ID multifactor authentication registration
• Policy enforcement: Enabled

You create a conditional access policy that has the following settings:

• Name: Policy1
• Assignments:
o Include: Group2
o Exclude: Group1
• Grant: Require multifactor authentication
• Enable policy: On

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by GetEsn at Oct. 16, 2024, 4:22 p.m.

Comments

Submit Cancel

JohnDoe47

Highly Voted 7 months, 3 weeks ago

This question is identical to question 247 No: He gets a registration prompt next time. BUT he can postpone registration No: He is excluded from both policies (exclude overrules include) Yes: He is included in the Conditional Access Policy

upvoted 10 times

rezarules

1 month, 1 week ago

correct, but user 2 has already MFA enabled. Even if he was not excluded, he still would not require to register during next sign in as he already has MFA enabled

upvoted 1 times

...

GetEsn

Highly Voted 8 months, 2 weeks ago

Y-N-Y User 3 : => Group 2 is excluded of Assignments But the Policy 1 require MFA, so the next time, User 3 will be required to register

upvoted 5 times

fabiomartinsnet

2 months, 3 weeks ago

Yes: MFA Policy. No: MFA is already enabled. Yes: CA policy.

upvoted 3 times

...

3abmula

7 months, 2 weeks ago

First one is No, User1 is excluded from CA policy, and only included in MFA registration policy which will not enforce user to register MFA on the next sign-in, registration can be skipped for 14 days. https://learn.microsoft.com/en-us/entra/id-protection/howto-identity-protection-configure-mfa-policy#user-experience

upvoted 2 times

...

Krayzr

Most Recent 5 months, 2 weeks ago

N-Y-Y Same question: https://www.examtopics.com/discussions/microsoft/view/58278-exam-ms-100-topic-4-question-69-discussion/

upvoted 1 times

Krayzr

5 months ago

Sorry there is a difference Required to REGISTER vs Required to USE

upvoted 1 times

...

justITtopics

7 months, 2 weeks ago

Let me know if I'm wrong! Who manage the required registration of the MFA is the "Multifactor authentication registration policy". The "conditional access policy" will only allow the access or not if you have this requeriment, but it will not require the MFA registration. N-N-N User 1 is in scope for requiring registration, but is not required for MFA yet, so user can bypass: User 2 is already enabled. User 3 is in group 2, excluded for the MFA registration.

upvoted 3 times

...

hola1010

7 months, 4 weeks ago

N-N-N User 1 is in scope for requiring registration, but is not required for MFA so user can bypass: Microsoft Entra ID Protection will prompt your users to register the next time they sign in interactively and they'll have 14 days to complete registration. During this 14-day period, they can bypass registration if MFA isn't required as a condition, but at the end of the period they're required to register before they can complete the sign-in process. User 2 is already enrolled. User 3 is out of scope of policies.

upvoted 2 times

hola1010

7 months, 4 weeks ago

Actually , N-N-Y . User 3 is in scope and "required for MFA"

upvoted 4 times

BigO76

5 months, 1 week ago

the question is "will be required to REGISTER for MFA on the next sign-in" so User 3 Excluded by Group2 → Not required to register for MFA.

upvoted 2 times

...