Exam AZ-300 topic 4 question 19 discussion

A. is Correct according to the https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted

Given answer is correct

A is correct

A is correct

A is correct

given answer is correct. Azure AD Multi-Factor Authentication is deployed by enforcing policies with Conditional Access. A Conditional Access policy can require users to perform multi-factor authentication when certain criteria are met such as: All users, a specific user, member of a group, or assigned role Specific cloud application being accessed Device platform State of device Network location or geo-located IP address Client applications Sign-in risk (Requires Identity Protection) Compliant device Hybrid Azure AD joined device Approved client application

Could be C as well. It depends how one interprets "two-step-verification". As with PIM you would be able to setup a process where e.g. a manager needs to manually acknowledge an elevated access. Sure answer A is standing for reason... but this question is quite vague IMHO

this could be an old question as MFA server was previously available but prior to july 2019. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfaserver-deploy

Enable Multi-Factor Authentication with Conditional Access Conditional Access policies enforce registration, requiring unregistered users to complete registration at first sign-in, an important security consideration.