AZ-104 Certification Practice Question #289

Question

You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.
What should you include in the recommendation?

Accepted Answer

The technical requirement in the case study specifies enforcing Azure Multi-Factor Authentication (MFA) exclusively for the users in the finance department.
1. **Dynamic Groups (B)** can automate group membership using rule-based queries (e.g., `user.department -eq "Finance"`). As users are added to or removed from the finance department, their group membership updates automatically.
2. **Conditional Access Policies (B)** are then applied to the finance dynamic group to enforce MFA when users in that group access company resources.
3. This combines to create a zero-administration solution for onboarding/offboarding finance users with required MFA, fully satisfying the case study requirements.
4. Other options are incorrect: Azure AD B2C (A) is for external customer identity management; Identity Protection (C) evaluates risk levels (like leaked credentials or atypical travel) rather than department-based automation; and MIM (D) is a legacy on-premises/hybrid identity management system which is overly complex and does not natively align with modern Azure cloud-only policies for this scenario.

More AZ-104 practice questions