SC-300 Certification Practice Question #130

Question

You plan to deploy a new Azure AD tenant.

Which multifactor authentication (MFA) method will be enabled by default for the tenant?

Accepted Answer

A new Azure AD/Entra tenant created after October 22, 2019 has security defaults enabled by default. Under security defaults, the only registrable and enforced MFA method is the Microsoft Authenticator app (notifications), with OATH TOTP codes as a fallback. SMS, voice call, and email OTP are not part of the default security-defaults method set. The Suggested Answer, an essentially unanimous Most Voted (10), the high-voted comment, and MS Learn all converge on A, so confidence is high.

More SC-300 practice questions