nerdexam
MicrosoftMicrosoft

AZ-500 · Question #524

AZ-500 Question #524: Real Exam Question with Answer & Explanation

When an MFA registration policy is enforced, users are given a 14-day grace period from their first sign-in to complete MFA registration, after which they are forced to register. User1 first authenticated on January 5, so 14 days later lands on January 19. User2 first authenticat

Submitted by salim_om· Mar 6, 2026Implement and manage identity in Microsoft Entra ID - specifically configuring and managing multi-factor authentication (MFA) policies and understanding enforcement timelines (Microsoft SC-300 / AZ-104 / MS-102)

Question

Drag and Drop Question You have a Microsoft Entra tenant. On January 1, you configure a multi-factor authentication (MFA) registration policy that has the following settings: - Assignments: All users - Require Microsoft Entra ID multifactor authentication registration: Enabled - Enforce policy: On On January 3, you create two new users named User1 and User2. On January 5, User1 authenticates to Microsoft Entra ID for the first time. On January 7, User2 authenticates to Microsoft Entra ID for the first time. On which date will User1 and User2 be forced to register for MFA? To answer, drag the appropriate dates to the correct users. Each date may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content. NOTE: Each correct selection is worth one point. Answer:

Explanation

When an MFA registration policy is enforced, users are given a 14-day grace period from their first sign-in to complete MFA registration, after which they are forced to register. User1 first authenticated on January 5, so 14 days later lands on January 19. User2 first authenticated on January 7, so 14 days later lands on January 21. The policy enforcement date and user creation date are irrelevant - the 14-day countdown begins from the user's first successful authentication.

Topics

#Microsoft Entra ID#MFA Registration Policy#Identity Protection#Conditional Access

Community Discussion

No community discussion yet for this question.

Full AZ-500 PracticeBrowse All AZ-500 Questions