Exam AZ-300 topic 16 question 28 discussion

Actual exam question from Microsoft's AZ-300

Question #: 28
Topic #: 16

Note: This question is part of series of questions that present the same scenario. Each question in the series contains a unique solution that might meet the stated goals. Some question sets might have more than one correct solution, while others might not have a correct solution.
After you answer a question in this section, you will NOT be able to return to it. As a result, these questions will not appear in the review screen.
You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1.
You need to enable multi-factor authentication (MFA) for the users in Group1 only.
Solution: From Multi-Factor Authentication, you select Bulk update, and you provide a CSV file that contains the members of Group1.
Does this meet the goal?

A. Yes
B. No

Show Suggested Answer

Suggested Answer: B 🗳️
We should use a Conditional Access policy.
Note: There are two ways to secure user sign-in events by requiring multi-factor authentication in Azure AD. The first, and preferred, option is to set up a
Conditional Access policy that requires multi-factor authentication under certain conditions. The second option is to enable each user for Azure Multi-Factor
Authentication. When users are enabled individually, they perform multi-factor authentication each time they sign in (with some exceptions, such as when they sign in from trusted IP addresses or when the remembered devices feature is turned on).
Enabling Azure Multi-Factor Authentication using Conditional Access policies is the recommended approach. Changing user states is no longer recommended unless your licenses don't include Conditional Access as it requires users to perform MFA every time they sign in.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-userstates

by cttay71 at Sept. 10, 2020, 2:16 a.m.

Comments

Submit Cancel

cttay71

Highly Voted 4 years, 9 months ago

Should be yes. There is a bulk update button where you can put the members' userid and MFA status.

upvoted 8 times

triptimandal01

4 years, 9 months ago

I agree, was trying same in lab.

upvoted 3 times

...

pluo2000

Most Recent 4 years, 9 months ago

This is a tricky question, it is about all users (present and future) in a group. Bulk upload will only solve the issue for present users, but not future ones, so answer is NO.

upvoted 1 times

...

hiimJosh

4 years, 9 months ago

answer is yes

upvoted 3 times

...