You are the global administrator for an Azure Directory (Azure AD) tenant named adatum.com. You need to enable two-step verification for Azure users. What should you do?

The correct answer is A. Create a single sign-in risk policy in Azure AD Identity Protection. With Azure Active Directory Identity Protection, you can: require users to register for multi-factor authentication handle risky sign-ins and compromised users https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/flows

Secure identities

Question

Options

ACreate a single sign-in risk policy in Azure AD Identity Protection.
BEnable Azure AD Privileged Identity Management.
CCreate and configure the Identity Hub.
DConfigure a security policy in Azure Security Center.

How the community answered

(37 responses)

A
84% (31)
B
5% (2)
C
3% (1)
D
8% (3)

Explanation

With Azure Active Directory Identity Protection, you can: require users to register for multi-factor authentication handle risky sign-ins and compromised users https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/flows

Topics

#multi-factor authentication#sign-in risk policy#Identity Protection#two-step verification

Community Discussion

No community discussion yet for this question.

Full AZ-101 Practice