sc-900 Practice Question 1775
Exam: sc-900
Domain: Describe the capabilities of Microsoft Entra
Topic: Describe Microsoft Entra authentication capabilities
Difficulty: medium
Contoso Ltd is implementing multi-factor authentication (MFA) for their users. They want to ensure that MFA is enforced for all users but with different methods based on user roles. Which configuration should they use to achieve this?
Answer Options
A
Configure MFA for all users with the same method.
B
Create conditional access policies based on user roles.
C
Set up SSPR for all users.
D
Implement FIDO2 for all users.
Correct Answer
B: Create conditional access policies based on user roles.
Explanation
The correct answer is B. Conditional access policies allow administrators to define specific conditions under which MFA should be enforced. By configuring different policies for different user roles, you can enforce MFA selectively based on role. Option A is incorrect because it does not provide selective enforcement based on user roles. Option C is incorrect as it refers to SSPR, which is for password reset, not MFA enforcement. Option D is incorrect because it refers to FIDO2, which is an authentication protocol, not a policy for enforcing MFA.