Exam MS-100 topic 4 question 6 discussion

Usage & insights blade also gives a quick overview of all the users registered with MFA. I would even say it's easier to use than the CLI

Both msol module and insights blade works,but you are tasked to prepare report. Export results to CSV from PowerShell seams easier and more precise option.

C for Cool, checked in production

I think things have changed on this question as you can only see limited details in the Usage & Insights in AAD. MFA isn't one of them. Back to using PowerShell Get-Msoluser. Another possibility is to use Microsoft Admin center --> active users --> multi-factor authentication sort by MFA status

the qeuestion ist You need to generate a report that lists all the users who completed the Azure MFA registration process that means in Usage and insights you cant see a alist of users only in cloud shell you can generate a list , remember you dont need to use powershel .

B & C both are correct, if I have to choose the best answer then would go for C as UI is more User friendly then running the PS, but indeed PS is more helpful in automating things and getting things faster if the script is handy

I am not here to debate but from the article: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-reporting It is specified in there the following: "Identify users who have registered for MFA using the PowerShell that follows. This set of commands excludes disabled users since these accounts cannot authenticate against Azure AD: Answer: Get-MsolUser There are different ways to get it sure but we can't really blame others when the question is so often unclear, just 1 single extra info would've made the right answer clearer.

Answer C: From the Azure Active Directory admin center, use the Usage & insights blade. Azure Active Directory > Useage and Insights > Authentication methods Activity > You can see all users regisitered and the usage

Correct answer is B. Usage & Insights only reports on MFA METHOD and the question is asking for a report on USERS registered. You cannot get a list of users from Usage & Insights.

Change my mind please - can you run Get-MsolUser in AZURE CLOUD SHELL ? I think it works, but with Windows Powershell with the module MSOnline. So defenitly C.

You can use below PowerShell cmdlets to get a list of users with MFA Enabled: Install-Module MSOnline If the module is not installed already. Connect-MsolService Login with Global Admin account. Get-MsolUser -All | select DisplayName,BlockCredential,UserPrincipalName,@{N="MFA Status"; E={ if( $_.StrongAuthenticationRequirements.State -ne $null){ $_.StrongAuthenticationRequirements.State} else { "Disabled"}}} To get a list of users with MFA Enabled => Answer B is correct

For me is C, because for Azure Cloud Shell you need to create a subscription, and for usage&insight it's just there.

Usage & Insights provides the details

Has anybody tried running the get-msoluser from Cloud Shell ? You all seems so sure ;-)...

C is a better answer

C is correct - i use it daily to generate report of MFA

It says open Cloud Shell, not open PowerShell. I'm answering B