AZ-101 · Question #35
You have an Azure Active Directory (Azure AD) tenant. You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the…
The correct answer is C. From the Azure portal, modify grant control of Policy1. There are two types of controls: Grant controls - To gate access Session controls - To restrict access to a session Grant controls oversee whether a user can complete authentication and reach the resource that they're attempting to sign-in to. If you have multiple controls…
Question
You have an Azure Active Directory (Azure AD) tenant. You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations. You need to ensure that members of the Global Administrators group will also be forced to use multi-factor authentication when authenticating from untrusted locations. What should you do?
Options
- AFrom the multi-factor authentication page, modify the service settings.
- BFrom the multi-factor authentication page, modify the user settings.
- CFrom the Azure portal, modify grant control of Policy1.
- DFrom the Azure portal, modify session control of Policy1.
How the community answered
(33 responses)- A15% (5)
- B3% (1)
- C73% (24)
- D9% (3)
Explanation
There are two types of controls: Grant controls - To gate access Session controls - To restrict access to a session Grant controls oversee whether a user can complete authentication and reach the resource that they're attempting to sign-in to. If you have multiple controls selected, you can configure whether all of them are required when your policy is processed. The current implementation of Azure Active Directory enables you to set the following grant control requirements: https://blog.lumen21.com/2017/12/15/conditional-access-in-azure-active-directory/
Topics
Community Discussion
No community discussion yet for this question.