Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 1 question 3 discussion

Actual exam question from Microsoft's AZ-104
Question #: 3
Topic #: 1
[All AZ-104 Questions]

Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has an Azure Active Directory (Azure AD) subscription.
You want to implement an Azure AD conditional access policy.
The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.
Solution: You access the Azure portal to alter the session control of the Azure AD conditional access policy.
Does the solution meet the goal?

  • A. Yes
  • B. No
Show Suggested Answer Hide Answer
Suggested Answer: B ūüó≥ÔłŹ

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
lyx
Highly Voted 2 years, 11 months ago
Ans: No. You alter the grant control, not session control
upvoted 57 times
YooOY
2 years, 10 months ago
Under Access controls > Grant, select Grant access, Require multi-factor authentication, and select Select. https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa
upvoted 23 times
...
jackdryan
1 year, 4 months ago
B is correct. You access the Azure portal to alter the grant control of the Azure AD conditional access policy.
upvoted 3 times
...
go4adil
5 months, 2 weeks ago
Correct Answer: B (No) In order to implement MFA and Azure AD-Joined device, you need to create a 'Conditional Access Policy'. To implement conditional access policy; Go to Microsoft Entra-->Protection-->Security Center-->Conditional Access Page-->Modify Grant Control (Not Session Control) -->Grant Access (Microsoft Entra Premium is required to implement Conditional Access policy) https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-azure-mfa?toc=%2Fentra%2Fidentity%2Fconditional-access%2Ftoc.json&bc=%2Fentra%2Fidentity%2Fconditional-access%2Fbreadcrumb%2Ftoc.json
upvoted 4 times
MohsenSic
4 months, 2 weeks ago
It is now in device settings and not protection, https://learn.microsoft.com/en-us/entra/identity/devices/media/manage-device-identities/device-settings-azure-portal.png
upvoted 1 times
...
...
...
epic13131
Highly Voted 3 years ago
Was on my exam.
upvoted 17 times
...
lipaj79558
Most Recent 1 week, 5 days ago
ITexamslab. B. No Explanation: The solution does not meet the goal because it only mentions altering session controls of the conditional access policy without specifying the required conditions of Multi-Factor Authentication and Azure AD-joined device for Global Administrators from untrusted locations. The policy must explicitly enforce these requirements to fulfill the stated goal.
upvoted 1 times
...
mattpaul
4 weeks, 1 day ago
Selected Answer: B
B is correct Get all questions from me contact me on [email protected]
upvoted 1 times
...
tsummey
1 month ago
Selected Answer: B
Under Assignments select the Global Admin Group Under Conditions set the location to any location and exclude all trusted locations Under Access Controls, grant access and check the options for require MFA and require the device to be marked as compliant.
upvoted 1 times
...
3ba6d0b
1 month, 2 weeks ago
Selected Answer: B
questions 3 and 4 are identical.
upvoted 1 times
...
76d5e04
1 month, 3 weeks ago
Hello All I see lot of recommendtions to check "Mlantonis" answers.Please let me know how to find it in this huge blog
upvoted 1 times
...
ristst001
1 month, 4 weeks ago
Hey folks, just got home from the testing center, passed with 900/1000 and I owe it all to ET, mlantonis and the gang here. This site is the SHIZZLE, it is spot frikkin' on! Learn all these questions and you WILL pass, guaranteed. I had one case study (it's here), and 51 questions, with only a couple I'd never seen. I had to make myself slow down, and I was thinking my score should've been higher, but that was likely due to the fact that I damn near answered a number of them immediately without reading the question! NO LABS. I can finally get my life back now...oh sleep, blessed sleep...
upvoted 2 times
...
MCLC2021
3 months, 2 weeks ago
Correc Answer B (NO). Within a Conditional Access policy: Access Control GRANT: an administrator can use access controls to grant or block access to resources. Access Control SESSION: an administrator can make use of session controls to enable limited experiences within specific cloud applications. https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-session https://learn.microsoft.com/en-us/entra/identity/conditional-access/concept-conditional-access-grant
upvoted 3 times
...
tashakori
4 months ago
No is right
upvoted 1 times
...
_gio_
6 months, 1 week ago
Selected Answer: B
answer is B
upvoted 1 times
...
DBFront
8 months, 2 weeks ago
Selected Answer: B
B is correct, needs to be grant control
upvoted 1 times
...
Minaru
9 months, 1 week ago
Correct answer is B. The solution mentioned does not fully meet the goal of requiring members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect from untrusted locations. While accessing the Azure portal to alter the session control is a step in the right direction, it's essential to configure the specific conditions and controls in the Azure AD conditional access policy to enforce these requirements. To achieve the goal, you need to create or modify an Azure AD conditional access policy and specify the conditions that require Multi-Factor Authentication and Azure AD-joined devices for members of the Global Administrators group when they access Azure AD from untrusted locations. Simply accessing the Azure portal to alter session control is not sufficient to fully implement this policy.
upvoted 4 times
...
Dan76
10 months ago
Does anyone have updated questions from 21.09.2023 (21sh of Sep) with contributor access and can send them to me through email: [email protected]. I would really appreciate it as I need to write and prepare for this exam with limited time and can't afford the contributor access. Thanks. I need to write the exam before the end of this month
upvoted 2 times
...
Misty39
10 months, 3 weeks ago
does anyone have updated questions from 21.08.2023 with contributor access and can send me through email: [email protected] Thank you in advance.
upvoted 3 times
DM25
10 months, 2 weeks ago
In Aug 2023 if I'm right they didn't change syllabus but made it open book. Yes it would be great to hear from someone who took after that. I am planning to write soon
upvoted 1 times
...
...
ShyamNallu_100813
1 year ago
Selected Answer: A
ANS :A
upvoted 3 times
SivaPannier
10 months, 3 weeks ago
I think the Answer is A only. I could see session control option in the Conditional Access Policy configuration page. Grant control should not be for session control. see the link below... https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-session.
upvoted 1 times
...
SivaPannier
10 months, 3 weeks ago
Sorry I am wrong in the earlier comment. The correct answer is B only, for the given requirement there is no need to configure anything in the session control page of conditional access policy. Hence this action will not fulfill the project requirement.
upvoted 3 times
...
...
james2033
1 year ago
Selected Answer: B
Focus at text "alter the session", it make B is correct choice.
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
ex Want to SAVE BIG on Certification Exam Prep?
close
ex Unlock All Exams with ExamTopics Pro 75% Off
  • arrow Choose From 1000+ Exams
  • arrow Access to 10 Exams per Month
  • arrow PDF Format Available
  • arrow Inline Discussions
  • arrow No Captcha/Robot Checks
Limited Time Offer
Ends in