AZ-500 · Question #181
Hotspot Question Your network contains an on-premises Active Directory domain that syncs to an Azure Active Directory (Azure AD) tenant. The tenant contains the users shown in the following table…
The correct answer is User1 will be prompted to configure MFA registration during the user's next Azure AD authentication. = Yes; User2 must configure MFA during the user's next Azure AD authentication. = No; User3 will be prompted to configure MFA registration during the user's next Azure AD authentication. = Yes. The multi-factor authentication (MFA) registration policy is configured to Include Group1 and Exclude Group2. The policy is enforced and requires Azure MFA registration. When a user is part of both an include and an exclude group for a policy, the exclude rule takes precedence…
Question
Exhibits
Answer Area
- User1 will be prompted to configure MFA registration during the user's next Azure AD authentication.Yes
- User2 must configure MFA during the user's next Azure AD authentication.No
- User3 will be prompted to configure MFA registration during the user's next Azure AD authentication.Yes
Explanation
The multi-factor authentication (MFA) registration policy is configured to Include Group1 and Exclude Group2. The policy is enforced and requires Azure MFA registration. When a user is part of both an include and an exclude group for a policy, the exclude rule takes precedence.
- User1: Is a member of
Group1(included) but notGroup2(excluded). Therefore, the MFA registration policy applies to User1, and they will be prompted to configure MFA registration. - User2: Is a member of both
Group1(included) andGroup2(excluded). Due to the exclusion taking precedence, the MFA registration policy will not apply to User2. - User3: Is a member of
Group1(included) but notGroup2(excluded). Therefore, the MFA registration policy applies to User3, and they will be prompted to configure MFA registration.
Topics
Community Discussion
No community discussion yet for this question.