Home » Microsoft » MS-500 v.2 » How do you require MFA for all users while keeping productivity disruptions to a minimum?
How do you require MFA for all users while keeping productivity disruptions to a minimum?
A. Enable MFA for all users using the MFA console
B. Enable a conditional access policy
C. Enable Azure AD Privileged Identity management
D. Enable Azure Role Based Access Control
Correct Answer: B
Explanation/Reference:
Enabling MFA for all users using the MFA console will certainly cause all users to be challenged for MFA, but they will have to supply MFA for every authentication. Conditional access allows us to only challenge for MFA under certain conditions, thereby minimizing productivity impact, while maintaining a high level of security.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview