nerdexam
Microsoft

AZ-500 · Question #534

Hotspot Question You have a Microsoft Entra tenant that contains the user shown in the following table. You configure a Conditional Access policy that has the following settings: - Name:CAPolicy1…

The correct answer is User1 is required to use number matching during sign-in. = No; User2 is required to use number matching during sign-in. = Yes; User3 is required to use number matching during sign-in. = Yes. To determine whether a user is required to use number matching during sign-in, we must refer to the Microsoft Authenticator settings under the 'Configure' tab. Here, the setting 'Require number matching for push notifications' is explicitly Enabled and Targets Group2. User1: Is…

Submitted by yousef_jo· Mar 6, 2026Secure identity and access

Question

Hotspot Question You have a Microsoft Entra tenant that contains the user shown in the following table. You configure a Conditional Access policy that has the following settings: - Name:CAPolicy1 - Assignments o Users or workload identities: Group1 o Target resources: All cloud apps - Access controls o Grant access: Require multifactor authentication From Microsoft Authenticator settings for the tenant, the Enable and Target settings are configured as shown in the Enable and Target exhibit. (Click the Enable and Target tab.) From Microsoft Authenticator settings for the tenant, the Configure settings are configured as shown in the Configure exhibit. (Click the Configure tab.) For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibits

AZ-500 question #534 exhibit 1
AZ-500 question #534 exhibit 2
AZ-500 question #534 exhibit 3
AZ-500 question #534 exhibit 4

Answer Area

  • User1 is required to use number matching during sign-in.No
  • User2 is required to use number matching during sign-in.Yes
  • User3 is required to use number matching during sign-in.Yes

Explanation

To determine whether a user is required to use number matching during sign-in, we must refer to the Microsoft Authenticator settings under the 'Configure' tab. Here, the setting 'Require number matching for push notifications' is explicitly Enabled and Targets Group2.

  • User1: Is a member of Group1. User1 is not a member of Group2. Therefore, User1 is not subject to the 'Require number matching for push notifications' policy and is not required to use number matching during sign-in.
  • User2: Is a member of both Group1 and Group2. Since User2 is a member of Group2, they are subject to the 'Require number matching for push notifications' policy and are required to use number matching during sign-in.
  • User3: Is a member of Group2. Therefore, User3 is subject to the 'Require number matching for push notifications' policy and is required to use number matching during sign-in.

Topics

#Conditional Access#Number Matching#Microsoft Authenticator#Entra Identity

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full AZ-500 Practice