Exam AZ-103 topic 5 question 23 discussion

I've sure someone will come up with a better answer but my thinking is: https://blog.siliconvalve.com/2018/08/27/understanding-tenants-subscriptions-regions-and-geographies-in-azure/ "Finally, Azure AD Tenants can be associated with multiple Subscriptions (typically in larger organisations), but a Subscription can only ever be associated with a single Azure AD Tenant at any time." ...therefore C is correct as we need another subscription to be able to connect with Tenant2.

I'm fairly confident this question has been wrongly written, certainly none of the answers are correct. Someone correct me if I'm wrong.

C is correct

this question is weird. How dose enable users in Tenant 2 have anything to do with Tenant 1?

As described here: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/active-directory-how-subscriptions-associated-directory Multiple subscriptions can trust the same tenant. However each subscription can only trust a single tenant. You can block or unblock multi-factor authentication (MFA) for users in your tenant. So I understand that on this example MFA is already enabled in Tenant1 and now we have to enable MFA in tenant2. But I cannot use the same subscription because as mentioned above each subscription can only trust a single tenant. So the answer is: Create and link a subscription in tenant2 I believe it would be clearer if the answer was: Create and link a new subscription in tenant2

Again, none of them seems correct!

C. Create and link a subscription to Tenant2.

Every Azure subscription is associated with an Azure Active Directory. Multiple subscriptions can be associated with a single Azure Active Directory, however a single subscription can't be associated with more than one Azure Active Directory.

I believe these answers are outdated at this point. As of 8.9.20, in my pay as you go subscription, I can add additional tenants to my subscription, change over to that tenant in the Azure Active Directory blade, and enable MFA users on it. Unfortunately, I'm not willing to pay for P1 to test if it's the exact same steps as with just one tenant, but the portal behaves the same with this new tenant, so I believe it will work the same as a single-tenant subscription.

It's confusing because you don't need subscription at all MFA. We have clients who have Office 365 and therefore an Azure AD tenant and they have MFA with no Azure subscription at all. I do not think any of the questions answers are right but the given answer seems to be the less wrong. I have over 40 clients with MFA and no subscription

URL provided has evidence supporting that C is the right answer here. any objections than can we have some URLs to build on that.

C is correct answer, the explanation for this question/solution is only one word "inherited"