Exam AZ-140 topic 3 question 38 discussion

Actual exam question from Microsoft's AZ-140

Question #: 38
Topic #: 3

HOTSPOT
-

You have an Azure Virtual Desktop deployment.

You plan to use a Conditional Access policy to enforce users to use the Microsoft Authenticator app if they use a web browser to sign in to a session host.

How should you configure the policy? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Show Suggested Answer

Suggested Answer:

by ClintC03 at Nov. 25, 2024, 8:33 p.m.

Comments

Submit Cancel

ClintC03

Highly Voted 8 months, 3 weeks ago

Grant: Require Authentication Strength This is the recommended configuration and you can set it to Passwordless MFA to require, at minimum, the Authenticator app. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths

upvoted 6 times

...

Dahkoht

Most Recent 5 months, 1 week ago

Grant should be the strength option, to force the MS app , the require MFA could still allow SMS.

upvoted 2 times

...

hwoccurrence

6 months, 3 weeks ago

Most likely the given answers are the once Microsoft accepts. Use “Require multi‐factor authentication” when you just want any MFA to happen, and you’re okay with any method (SMS, phone call, Authenticator, etc.). It’s straightforward and requires no extra configuration. Use “Require authentication strength” when you want to restrict which MFA methods count (for example, “no SMS; only Authenticator or FIDO2 keys”). You can enforce specific, more secure methods. It’s more flexible but needs some additional setup in Microsoft Entra (Azure AD).

upvoted 1 times

...