You configure a new Microsoft 365 tenant to use a default domain name of contoso.com. You need to ensure that you can control access to Microsoft 365 resources by using conditional access policies. What should you do first?
A.
Disable the User consent settings.
B.
Disable Security defaults.
C.
Configure a multi-factor authentication (MFA) registration policy.
D.
Configure password protection for Windows Server Active Directory.
Taken from article in answer: “If your tenant was created on or after October 22, 2019, it is possible security defaults are already enabled in your tenant. To protect all of our users, security defaults are being rolled out to all new tenants created.”
To enable CAP you have to disable Security defaults - Answer is correct.
To control access to Microsoft 365 resources by using conditional access policies, you should first disable Security defaults. This is because Security defaults are a set of basic identity and access management features that are automatically enabled for new tenants. They are not compatible with conditional access policies.
After disabling Security defaults, you can then configure conditional access policies to control access to Microsoft 365 resources
B is correct.
If you're using Conditional Access in your environment today, security defaults won't be available to you.
https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults
A voting comment increases the vote count for the chosen answer by one.
Upvoting a comment with a selected answer will also increase the vote count towards that answer by one.
So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.
Eltooth
Highly Voted 3 years, 1 month agoa6792d4
Most Recent 1 month, 3 weeks agoELQUMS
5 months, 2 weeks agokalyankrishna1
9 months, 3 weeks agoEmnCours
11 months, 3 weeks agomali1969
1 year agodule27
1 year, 1 month agoShoaibPKDXB
1 year, 2 months agofrancescoc
1 year, 3 months agoAquintero
1 year, 5 months agoOknip
1 year, 5 months ago[Removed]
1 year, 7 months agoBoknows
1 year, 8 months agoSeed001
1 year, 12 months agojedboy88
2 years agoshine98
2 years agostromnessian
2 years, 4 months ago