nerdexam
Microsoft

AZ-101 · Question #29

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a…

The correct answer is A. Enable Azure AD Multi-Factor Authentication (MFA). Require MFA for admins is a baseline policy that requires MFA for the following directory roles: Global administrator SharePoint administrator Exchange administrator Conditional access administrator Security administrator…

Secure identities

Question

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a user named Admin1. You need to ensure that Admin1 has just-in-time access as a conditional access administrator. What should you do next?

Options

  • AEnable Azure AD Multi-Factor Authentication (MFA).
  • BSet Admin1 as Eligible for the Privileged Role Administrator role.
  • CSet Admin1 as Eligible for the Conditional Access Administrator role.
  • DEnable Azure AD Identity Protection.

How the community answered

(16 responses)
  • A
    75% (12)
  • B
    13% (2)
  • C
    6% (1)
  • D
    6% (1)

Explanation

Require MFA for admins is a baseline policy that requires MFA for the following directory roles: Global administrator SharePoint administrator Exchange administrator Conditional access administrator Security administrator https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/baseline-protection

Topics

#Privileged Identity Management#just-in-time access#conditional access#MFA

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-101 Practice