nerdexam
Microsoft

AZ-500 · Question #524

Drag and Drop Question You have a Microsoft Entra tenant. On January 1, you configure a multi-factor authentication (MFA) registration policy that has the following settings: - Assignments: All…

The correct answer is January 19; January 21. When an MFA registration policy is enforced, users are given a 14-day grace period from their first sign-in to complete MFA registration, after which they are forced to register. User1 first authenticated on January 5, so 14 days later lands on January 19. User2 first…

Submitted by salim_om· Mar 6, 2026Implement and manage identity in Microsoft Entra ID - specifically configuring and managing multi-factor authentication (MFA) policies and understanding enforcement timelines (Microsoft SC-300 / AZ-104 / MS-102)

Question

Drag and Drop Question You have a Microsoft Entra tenant. On January 1, you configure a multi-factor authentication (MFA) registration policy that has the following settings: - Assignments: All users - Require Microsoft Entra ID multifactor authentication registration: Enabled - Enforce policy: On On January 3, you create two new users named User1 and User2. On January 5, User1 authenticates to Microsoft Entra ID for the first time. On January 7, User2 authenticates to Microsoft Entra ID for the first time. On which date will User1 and User2 be forced to register for MFA? To answer, drag the appropriate dates to the correct users. Each date may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Exhibit

AZ-500 question #524 exhibit

Answer Area

Drag items

January 15January 19January 21February 1February 5February 7

Correct arrangement

  • January 19
  • January 21

Explanation

When an MFA registration policy is enforced, users are given a 14-day grace period from their first sign-in to complete MFA registration, after which they are forced to register. User1 first authenticated on January 5, so 14 days later lands on January 19. User2 first authenticated on January 7, so 14 days later lands on January 21. The policy enforcement date and user creation date are irrelevant - the 14-day countdown begins from the user's first successful authentication.

Topics

#Microsoft Entra ID#MFA Registration Policy#Identity Protection#Conditional Access

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice