Exam MS-100 topic 4 question 20 discussion

Actual exam question from Microsoft's MS-100

Question #: 20
Topic #: 4

Your company has a Microsoft 365 subscription that has multi-factor authentication configured for all users.
Users that connect to Microsoft 365 services report that they are prompted for multi-factor authentication multiple times a day.
You need to reduce the number of times the users are prompted for multi-factor authentication on their company-owned devices. Your solution must ensure that users are still prompted for MFA.
What should you do?

A. Enable the multi-factor authentication trusted IPs setting, and then verify each device as a trusted device.
B. Enable the remember multi-factor authentication setting, and then verify each device as a trusted device.
C. Enable the multi-factor authentication trusted IPs setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).
D. Enable the remember multi-factor authentication setting, and then join all client computers to Microsoft Azure Active Directory (Azure AD).

Show Suggested Answer

Suggested Answer: B 🗳️
The remember Multi-Factor Authentication feature for devices and browsers that are trusted by the user is a free feature for all Multi-Factor Authentication users.
Users can bypass subsequent verifications for a specified number of days, after they've successfully signed-in to a device by using Multi-Factor Authentication.
The feature enhances usability by minimizing the number of times a user has to perform two-step verification on the same device.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-mfasettings

by lucidgreen at April 20, 2021, 2:17 a.m.

Comments

Submit Cancel

jkklim

3 years, 7 months ago

B https://support.microsoft.com/en-us/account-billing/how-to-use-two-step-verification-with-your-microsoft-account-c7910146-672f-01e9-50a0-93b4585e7eb4 https://support.microsoft.com/en-us/account-billing/add-a-trusted-device-to-your-microsoft-account-fe3860c8-bc04-9770-e218-b4fd6b767f4b

upvoted 1 times

...

jkklim

3 years, 7 months ago

upvoted 1 times

...

JakeH

3 years, 8 months ago

In exam today

upvoted 4 times

...

Kipperson

4 years, 2 months ago

I would think D. B just verify but what does it actually accomplish? If you select D then you can configure your conditional access to bypass any domain joined devices or mark them as compliant to bypass.

upvoted 2 times

...