AZ-204 Certification Practice Question #13

Question

You have an Azure Active Directory (Azure AD) tenant.
You want to implement multi-factor authentication by making use of a conditional access policy. The conditional access policy must be applied to all users when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

To require multi-factor authentication (MFA) for all users accessing the Azure portal via a Conditional Access policy, three main settings must be configured:
1. **Users and groups** (under Assignments) to specify the scope of users (in this case, all users, with break-glass account exclusions).
2. **Cloud apps** (under Assignments, now called Target resources) to specify the targeted applications (specifically, Microsoft Azure Management or Windows Azure Service Management API).
3. **Grant** (under Access controls) to define the enforcement action, which is requiring multi-factor authentication.
Other settings like Conditions (e.g. location or device platforms) and Session controls are not required for this basic policy.

More AZ-204 practice questions