SC-300 Certification Practice Question #95

Question

You have an Azure Active Directory (Azure AD) tenant that has Security defaults disabled.
You are creating a conditional access policy as shown in the following exhibit.

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

Require multi-factor authentication is enforced through the policy's **Grant** access control, so forcing User1 to be prompted for MFA is configured under Grant settings. Requiring re-authentication on a fixed interval (every eight hours) is the Sign-in frequency control, which lives under the **Session** settings, per MS Learn. The other dropdown options — Conditions, Users and groups, and Enable policy — govern scope and on/off state, not enforcement, so they are eliminated. The community is unanimous (top comment 38 👍 plus an explicit row-by-row confirmation from dule27), with multiple reports of the item appearing verbatim on the live exam, so confidence is high.

More SC-300 practice questions