AZ-104 Certification Practice Question #59

Question

You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

To create a basic Conditional Access policy requiring Multi-Factor Authentication (MFA) for the Azure portal, you must define:
1. **Users and groups** (under Assignments) to specify *who* the policy applies to (e.g., "All users" or specific users/groups).
2. **Cloud apps or actions** (under Assignments) to target the *Azure portal* (or the "Microsoft Azure Management" app).
3. **Grant** (under Access controls) to enforce the control, which is "Require multifactor authentication".
Other settings like "Conditions" (e.g., device platforms, locations, client apps) and "Session" controls are not required to fulfill this basic requirement.

More AZ-104 practice questions