ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-103 All Questions

View all questions & answers for the AZ-103 exam
Go to Exam

Exam AZ-103 topic 16 question 73 discussion

Actual exam question from Microsoft's AZ-103
Question #: 73
Topic #: 16
[All AZ-103 Questions]

You have an Azure subscription that contains an Azure Active Directory (Azure AD) tenant named adatum.com. The tenant contains 500 user accounts.
You deploy Microsoft Office 365. You configure Office 365 to use the user accounts in adatum.com.
You configure 60 users to connect to mailboxes in Microsoft Exchange Online.
You need to ensure that the 60 users use Azure Multi-Factor Authentication (MFA) to connect to the Exchange Online mailboxes. The solution must only affect connections to the Exchange Online mailboxes.
What should you do?

  • A. From the multi-factor authentication page, configure the Multi-Factor Auth status for each user
  • B. From Azure Active Directory admin center, create a conditional access policy
  • C. From the multi-factor authentication page, modify the verification options
  • D. From the Azure Active Directory admin center, configure an authentication method
Show Suggested Answer Hide Answer
Suggested Answer: A 🗳️
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates
by Duvy at May 8, 2020, 2:49 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
gsbence
Highly Voted 5 years, 1 month ago
Right answer is B, only Conditional Access supports per app settings.
upvoted 11 times
...
Duvy
Highly Voted 5 years, 1 month ago
I think this answer is B. Right on the site provided in the answer it says: "Enabling Azure Multi-Factor Authentication using Conditional Access policies is the recommended approach. Changing user states is no longer recommended unless your licenses don't include Conditional Access as it requires users to perform MFA every time they sign in." Can anyone determine in the question that there is a license issue and has to be done via A (MFA, each user)?
upvoted 9 times
...
Amir1909
Most Recent 1 year, 4 months ago
B is correct
upvoted 1 times
...
ea5c9f9
1 year, 4 months ago
Selected Answer: A
The correct answer being taught to all learners is A.
upvoted 1 times
...
Thi
4 years, 7 months ago
B. From Azure Active Directory admin center, create a conditional access policy
upvoted 2 times
...
Abhi_kraj
4 years, 9 months ago
Give Answer is correct using below link we can manage MFA for user https://account.activedirectory.windowsazure.com/UserManagement/MultifactorVerification.aspx?BrandContextID=O365
upvoted 2 times
...
Gizdagyerek
4 years, 11 months ago
Even if there is no additional group or attribute settings mentioned for B, I would tend to go with it, because it seems to me that MFA should be used only for connecting to Exchange Online .
upvoted 1 times
...
remz
5 years ago
A is correct, for B to be right you need to have a group to bound the conditional access to, B is a workaround, simply go to office 365, users Blade and choose each user to enable MFA for
upvoted 4 times
arseyam
4 years, 9 months ago
Correct answer is B - whether you have a group or not you have to create a conditional access policy because the requirement is "The solution must only affect connections to the Exchange Online mailboxes"
upvoted 2 times
...
...
Azurist
5 years ago
B is correct NOT A
upvoted 3 times
...
zakhanz
5 years, 1 month ago
I would agree, correct answer is B. https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa
upvoted 4 times
...
noeperdepoep
5 years, 1 month ago
B seems better because it is a single administrative effort: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions#client-apps-preview
upvoted 2 times
praveen97
4 years, 12 months ago
Correct answer is B. With Conditional Policies, we can select All Users and then select the Cloud app as 'Office 365 Exchange Online' and Grant MFA. This policy will prompt for MFA if any user is trying to connect to Exchange Online. Since only 60 users are configured to connect to exchange online, only they will get the MFA prompt. Remaining users can't connect to exchange online since they are configured for EXO.
upvoted 1 times
praveen97
4 years, 12 months ago
Correction: Remaining users can't connect to exchange online since they are not* configured for EXO. They will get an error when they try to connect to EXO and so they will not get any prompt to setup MFA.
upvoted 1 times
...
...
...
Cloudyuga
5 years, 1 month ago
Given answer is wrong. There is no office 365 on mfa page to configure. this is possible by conditional access policy only. there is a cloud app or action under conditional policy creation where we can select Office 365 aap. so correct answer is B.From Azure Active Directory admin center, create a conditional access policy
upvoted 2 times
...
akamal
5 years, 1 month ago
Correct answer is B
upvoted 7 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel