Home » Microsoft » AZ-102 » What should you include in the recommendation?
You need to recommend a solution to automate the configuration for the finance department users. The solution must meet the technical requirements.
What should you include in the recommendation?
A. Azure AD Identity Protection
B. Azure AD B2C
C. An Azure logic app and the Microsoft Identity Management (MIM) client
D. Dynamic groups and conditional access policies
Correct Answer: D
Explanation/Reference:
Explanation:
Scenario: Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only.
Conditional Access is a feature of Azure Active Directory (Azure AD) that lets you control how and when users can access applications and services.
Note: In Azure Active Directory (Azure AD), you can create complex attribute-based rules to enable dynamic memberships for groups. Dynamic group membership reduces the administrative overhead of adding and removing users.
When any attributes of a user or device change, the system evaluates all dynamic group rules in a directory to see if the change would trigger any group adds or removes. If a user or device satisfies a rule on a group, they are added as a member of that group. If they no longer satisfy the rule, they are removed.
References:
https://support.microsoft.com/en-ae/help/4467879/conditional-access-and-multi-factor-authentication-in-flow
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership
Evaluate and perform server migration to Azure 04