AZ-500 Question #210: Real Exam Question with Answer & Explanation

Submitted by naveen.iyer· Mar 6, 2026Manage Azure Active Directory (Azure AD) identities and configure Multi-Factor Authentication (MFA) - aligns with the AZ-104 'Manage identities and governance in Azure' domain or SC-900 'Describe identity concepts' domain.

Question

SIMULATION You need to create a new Azure Active Directory (Azure AD) directory named 10317806.onmicrosoft.com. The new directory must contain a user named user10317806 who is configured to sign in by using Azure Multi-Factor Authentication (MFA). Answer: See the explanation below.

Options

taskCreate a new Azure Active Directory (Azure AD) directory named 10317806.onmicrosoft.com. The new directory must contain a user named user10317806 who is configured to sign in by using Azure Multi-Factor Authentication (MFA).
prerequisitesAzure portal access with an account that has an Azure subscription

Explanation

The correct process involves creating a new Azure AD tenant by navigating to the Azure portal, searching for and selecting 'Azure Active Directory,' and providing the required organization name and initial domain name (10317806.onmicrosoft.com). After the directory is created, a user (user10317806) must be added to that new tenant, and MFA must be enabled for that user either through the Azure AD MFA settings, Conditional Access policies, or the per-user MFA portal - this is the only supported workflow for provisioning a new isolated directory with MFA-enabled users in Azure. This simulation tests hands-on knowledge of Azure AD tenant creation and MFA configuration, which are foundational identity management tasks.

Topics

#Azure Active Directory#Multi-Factor Authentication#Identity Management#Azure AD Tenant Creation

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice Browse All AZ-500 Questions