MS-102 Practice Question 3039
Exam: MS-102
Domain: Implement and manage Microsoft Entra identity and access
Difficulty: medium
You configure a Conditional Access policy requiring MFA for all administrative portals. You need to ensure emergency access break-glass accounts are not locked out if an MFA outage occurs. What is the best practice?
Answer Options
A
Designate emergency access break-glass accounts excluded from policies
B
Disable MFA tenant-wide during weekend hours
C
Share the Global Administrator password across all helpdesk staff
D
Configure all admin accounts to use simple predictable passwords
Correct Answer
A: Designate emergency access break-glass accounts excluded from policies
Explanation
Create at least two emergency access break-glass accounts, exclude them explicitly from all Conditional Access policies, and monitor their sign-in activity continuously.