Exam AZ-303 topic 2 question 25 discussion

Create a named location won't solve the problem. The trusted IP's should be added to the name locations. Option B is correct

26-June-21, Passed the exam. I got only A,C,D options. I think it is name locations.

The first line reads "Enable MFA for all users". So B is the correct answer. If the MFA was enabled for selected users, then the conditional access makes sense.

Both A and B are feasible, I think what the question is looking for is location related ie “head office”. That suggests A is the answer.

Answer is A as it is a newer approach

A is correct!

I'm going A named location. The CAP form allows a location to be excluded from a policy (where the requirement for MFA would be set up), and it seems to be a use case for them: "Organizations can use this location for common tasks like: Requiring multi-factor authentication for users accessing a service when they're off the corporate network." https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

You are advising a company that has enabled MFA for all its users. The company’s support desk is seeing an increase in support tickets from users who are receiving MFA requests while working within the company’s main campus. You are asked to provide a recommendation that prevents the users from receiving MFA requests while on the main campus. The company has an Azure subscription. What do you advise? From the MFA service settings, create a trusted IP range. From the conditional access in Azure AD, create a named location. From the conditional access in Azure AD, create a custom control. From the conditional access in Azure AD, configure organizational relationships. Explanation Correct Answer: From the MFA service settings, create a trusted IP range. By creating a trusted IP range in the MFA service settings you provide users with the ability to avoid MFA requests while on company sites.

It is B

Repeated of Question 15 with change in Format

It should be "A". https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

B is correct

The Trusted IPs feature of Azure Multi-Factor Authentication bypasses multi-factor authentication prompts for users who sign in from a defined IP address range. You can set trusted IP ranges for your on-premises environments to when users are in one of those locations, there's no Azure Multi-Factor Authentication prompt. https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings#trusted-ips B is the answer

B is correct!

I had this question today but instead of "From the MFA service settings, create a trusted IP range" there were different option.

Answer is B, you don't always need a conditional access policy to enable MFA.

On exam 5/15/2021