Exam 70-742 topic 1 question 246 discussion

DRAG DROP -
Your company implements Active Directory Federation Services (AD FS).
You confirm that the company meets all the prerequisites for using Microsoft Azure Multi-Factor Authentication (MFA) and AD FS.
You need to ensure that you can select MFA as the primary authentication method for AD FS.
Which three actions should you perform in sequence? To answer move the appropriate actions from the list of actions to the answer area and arrange them in the correct order.
Select and Place:

Suggested Answer:
In order to complete configuration for Azure MFA for AD FS, you need to configure each AD FS server using the steps described.
1. You start by generating a certificate for Azure MFA on each AD FS server using the New-AdfsAzureMfaTenantCertificate cmdlet.
2. You then add the new credentials to Azure Multi-Factor Auth Client SPN by connecting to your instance of Azure AD via the Connect-MsolService cmdlet.
3. Once you have completed the previous section on each AD FS server, you will need to run the Set-AdfsAzureMfaTenant cmdlet.
References:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-and-azure-mfa