MS-102 Practice Question 3053
Exam: MS-102
Domain: Implement and manage Microsoft Entra identity and access
Difficulty: easy
You need to configure Conditional Access to enforce MFA only when a user sign-in session originates from an untrusted network outside corporate IP boundaries. What must you define first in Microsoft Entra ID?
Answer Options
A
Named Locations defined by trusted IP address ranges
B
Active Directory Sites and Services subnets
C
DNS forward lookup zones
D
Virtual Private Network adapter MAC addresses
Correct Answer
A: Named Locations defined by trusted IP address ranges
Explanation
Named Locations defined by trusted public IP CIDR ranges allow Conditional Access policies to evaluate whether traffic originates inside or outside corporate networks.