ExamTopics Logo
Mail Us[email protected]
Menu
Microsoft Discussions
exam questions

Exam AZ-104 All Questions

View all questions & answers for the AZ-104 exam
Go to Exam

Exam AZ-104 topic 2 question 28 discussion

Actual exam question from Microsoft's AZ-104
Question #: 28
Topic #: 2
[All AZ-104 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant.
You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.
Which three settings should you configure? To answer, select the appropriate settings in the answer area.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/app-based-mfa
by desmondfernando at Dec. 2, 2020, 2:01 a.m.

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
Submit Cancel
fedztedz
Highly Voted 4 years, 4 months ago
The Answer is correct . - Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: to specify the Azure portal - Grant: to grant the MFA. Those are the minimum requirements to create MFA policy. No conditions are required in the question. Also check this link beside the one provided in the answer https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies
upvoted 305 times
Bigbluee
2 years, 1 month ago
https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa#create-a-conditional-access-policy - Select New policy. - Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. - Under Assignments, select Users or workload identities. Under Include, select All users Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts. - Under Cloud apps or actions > Include, select All cloud apps. Under Exclude, select any applications that don't require multifactor authentication. - Under Access controls > Grant, select Grant access, Require multifactor authentication, and select Select.
upvoted 17 times
...
redbeardbeer
3 years, 11 months ago
Thanks for the great description. Very helpful.
upvoted 16 times
...
Shadoken
2 years, 10 months ago
At the present you can't select Azure Portal. You have to choose «All cloud apps» options I think. Azure Portal doesn't appear as an app to choose.
upvoted 6 times
...
...
mlantonis
Highly Voted 3 years, 11 months ago
Correct Answer: - Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: To specify the Azure portal - Select Grant: To grant the MFA.
upvoted 151 times
...
[Removed]
Most Recent 7 months, 3 weeks ago
correct
upvoted 2 times
...
rocky48
2 years, 1 month ago
Correct Answer: - Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: To specify the Azure portal - Select Grant: To grant the MFA.
upvoted 2 times
...
CoachV
2 years, 3 months ago
The following steps will help create a Conditional Access policy to require all users do multifactor authentication. Sign in to the Azure portal as a Conditional Access Administrator, Security Administrator, or Global Administrator. Browse to Azure Active Directory > Security > Conditional Access. Select New policy. Give your policy a name. We recommend that organizations create a meaningful standard for the names of their policies. Under Assignments, select Users or workload identities. Under Include, select All users Under Exclude, select Users and groups and choose your organization's emergency access or break-glass accounts. Under Cloud apps or actions > Include, select All cloud apps. Under Exclude, select any applications that don't require multifactor authentication. Under Access controls > Grant, select Grant access, Require multifactor authentication, and select Select. Confirm your settings and set Enable policy to Report-only. Select Create to create to enable your policy.
upvoted 8 times
...
AndreLima
2 years, 4 months ago
Respostas bem confusas.
upvoted 1 times
...
NaoVaz
2 years, 7 months ago
1) Assignments -> "Users and Groups" 2) Assignments -> "Cloud Apps" 3) Access Controls -> "Grant" Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-policies
upvoted 4 times
...
EmnCours
2 years, 7 months ago
The Answer is correct . - Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: to specify the Azure portal - Grant: to grant the MFA.
upvoted 1 times
...
klasbeatz
2 years, 10 months ago
Tricky one This confused me but makes sense now...."CONDITIONS" is only to add MULTIPLE conditions you are already creating a conditional policy alone with this template
upvoted 5 times
SivaPannier
1 year, 7 months ago
Yes.. look at the below link for more information.. https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/concept-conditional-access-conditions
upvoted 1 times
...
...
manalshowaei
2 years, 10 months ago
Answer is correct
upvoted 1 times
...
Jvp21
3 years, 2 months ago
- Select Users & Groups : To choose all users. - Select Cloud apps or actions: To specify the Azure portal - Select Grant: To grant IF only pass the MFA authentication.
upvoted 4 times
...
Mozbius_
3 years, 3 months ago
Can you believe that "Conditional Access" is barely mentioned in the paid Microsoft training for az104 and yet students are expected to know about it in the exam!?!? Sooo frustrating!!!!
upvoted 8 times
Mozbius_
3 years, 3 months ago
I literally have to GOOGLE many of the topics covered here because of how weak MS courses are toward az104 certification damn it.
upvoted 6 times
...
Empel
3 years, 2 months ago
If the official course had to cover everything it will be a 3 month course at least. There is just no time to cover everything in 4 days. I took the course as well but the instructor told us that it was not enough.
upvoted 4 times
...
Scoobysnaks86
2 years, 10 months ago
Just pass the test and get familiar with things. If you get the job, and aren't sure what to do in certain circumstances, there's google and the ms site where you can learn and use in your job.
upvoted 6 times
klasbeatz
2 years, 10 months ago
Agreed just watch the crash course videos and just pass the exam you'll learn the rest on the job. Just get the cert to get a job.
upvoted 3 times
...
...
...
JamesChan0620
3 years, 7 months ago
The answer is correct?
upvoted 3 times
omw2wealth
3 years, 7 months ago
Yes it is correct
upvoted 1 times
...
...
mkoprivnj
3 years, 10 months ago
- Select Users & Groups : Where you have to choose all users. - Select Cloud apps or actions: to specify the Azure portal - Grant: to grant the MFA.
upvoted 3 times
...
saddamakhtar
3 years, 12 months ago
Answer is correct
upvoted 1 times
...
mg
4 years, 1 month ago
Answer is correct
upvoted 1 times
...
ZUMY
4 years, 1 month ago
Given answer is correct 1.user or groups 2.apps 3.grant or deny
upvoted 3 times
...
Load full discussion...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago