exam questions

Exam MS-500 All Questions

View all questions & answers for the MS-500 exam

Exam MS-500 topic 2 question 11 discussion

Actual exam question from Microsoft's MS-500
Question #: 11
Topic #: 2
[All MS-500 Questions]

SIMULATION -
You need to ensure that a user named Allan Deyoung uses multi-factor authentication (MFA) for all authentication requests.
To complete this task, sign in to the Microsoft 365 admin center.

Show Suggested Answer Hide Answer
Suggested Answer: See explanation below.
1. Open the Admin Center and go to Users > Active Users
2. Open Multi-factor authentication
Don't select any user yet, just open the Multi-factor authentication screen. You will find the button in the toolbar.

3. Open the Service settings
Before we start enabling MFA for the users, we first go through the service settings. The button to the settings screen doesn't stand out, but it's just below the title

4. Setup MFA Office 365
A few settings are important here:
✑ Make sure you check the App password. Otherwise, users can't authenticate in some applications (like the default mail app in Android).
Also, take a look at the remember function. By default, it is set to 14 days.


5. Enable MFA for Office 365 users
After you have set the settings to your liking click on save and then on users (just below the title Multi-factor authentication).
You see the list of your users again. Here you can select single or multiple users to enable MFA.
At the moment you enable Office 365 MFA for a user it can get the setup screen as soon as the users browse to one of the Office 365 products.

Reference:
https://lazyadmin.nl/office-365/how-to-setup-mfa-in-office-365/

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
dlt_mate
Highly Voted 3 years, 9 months ago
I disagree with this one. Enabling 'app passwords' and 'remember mfa' settings doesn't meet the criteria of "Allan Deyoung uses MFA for ALL authentication requests".
upvoted 6 times
...
HnTer
Highly Voted 3 years, 10 months ago
How to enable MFA for whole org: M365 admin center -> Settings | Org settings -> Modern authentication -> Turn on modern authentication How to then enable MFA for *a user*: M365 admin center -> Settings | Org settings -> Multi-factor authentication -> Select a user -> Enable (MFA now comes enabled by default, so this probably doesn't have to be done anymore).
upvoted 5 times
...
pitie110
Most Recent 2 years, 8 months ago
Cant we just enforce mfa for Allan ?
upvoted 2 times
skycrap
2 years, 4 months ago
Agee, that is also the question. No reference to org settings or other users
upvoted 1 times
...
...
AzlearnRB
2 years, 8 months ago
Isnt it also possible to set a CA-Policy with this single user and require MFA?
upvoted 4 times
...
WMG
3 years, 8 months ago
If the question says "Use MFA for all authentication requests", enabling App Password breaks that (as you do not use MFA for that type of authentication).
upvoted 4 times
scar8
3 years, 7 months ago
yes, obviously answer was only copied from linked page for a more general description. so disable App Passwords and don't allow remembering
upvoted 5 times
...
...
MCPsince1999
4 years, 1 month ago
I would do two steps ((MFA) for all authentication requests): 1. Enable per user MFA 2. disable ability to use app password
upvoted 2 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...
exam
Someone Bought Contributor Access for:
SY0-701
London, 1 minute ago