Exam MS-100 topic 4 question 33 discussion

Actual exam question from Microsoft's MS-100

Question #: 33
Topic #: 4

Your company has three main offices and one branch office. The branch office is used for research.
The company plans to implement a Microsoft 365 tenant and to deploy multi-factor authentication.
You need to recommend a Microsoft 365 solution to ensure that multi-factor authentication is enforced only for users in the branch office.
What should you include in the recommendation?

A. Microsoft Azure Active Directory (Azure AD) conditional access.
B. Microsoft Azure Active Directory (Azure AD) password protection.
C. A Microsoft Endpoint Manager device compliance policy.
D. A Microsoft Endpoint Manager device configuration profile.

Show Suggested Answer

Suggested Answer: A 🗳️
With Azure Active Directory (Azure AD) Conditional Access, you can control how authorized users can access your cloud apps. The location condition of a
Conditional Access policy enables you to tie access controls settings to the network locations of your users.
For this question, we need to configure a location condition in a conditional access policy and apply the policy to users in that location (the branch office). The conditional access policy can be required to 'Allow Access' but 'Required MFA'.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/location-condition

by venwaik at July 22, 2021, 8:28 p.m.

Comments

Submit Cancel

stoneface

3 years, 5 months ago

Repeated question

upvoted 2 times

...

venwaik

3 years, 10 months ago

Agree with the answer. Azure AD>Conditional Access > Policies > open policy > under access controls click "* controls selected" and tick the require multi-factor authentication box.

upvoted 3 times

...