Microsoft
AZ-104 · Question #357
You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a…
The correct answer is A. Enable Azure AD Multi-Factor Authentication (MFA). Require MFA for admins is a baseline policy that requires MFA for the following directory roles: Global administrator SharePoint administrator Exchange administrator Conditional access administrator Security administrator…
Submitted by satoshi_tk· Mar 4, 2026Manage identities and governance
Question
You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a user named Admin1. You need to ensure that Admin1 has just-in-time access as a conditional access administrator. What should you do next?
Options
- AEnable Azure AD Multi-Factor Authentication (MFA).
- BSet Admin1 as Eligible for the Privileged Role Administrator role.
- CSet Admin1 as Eligible for the Conditional Access Administrator role.
- DEnable Azure AD Identity Protection.
How the community answered
(49 responses)- A82% (40)
- B2% (1)
- C4% (2)
- D12% (6)
Explanation
Require MFA for admins is a baseline policy that requires MFA for the following directory roles: Global administrator SharePoint administrator Exchange administrator Conditional access administrator Security administrator https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/baseline-protection
Community Discussion
No community discussion yet for this question.