nerdexam
Microsoft

MB-700 · Question #155

A company is implementing Dynamics 365 Finance. The company allows access to production systems only from approved IP addresses. In addition, the company requires multi-factor authentication (MFA)…

The correct answer is D. Azure Active Directory conditional access. Azure Active Directory Conditional Access is the correct tool because it enforces both IP-based access restrictions and MFA requirements as policy-driven controls for any Azure AD-protected application including Dynamics 365 Finance.

Architect solutions

Question

A company is implementing Dynamics 365 Finance. The company allows access to production systems only from approved IP addresses. In addition, the company requires multi-factor authentication (MFA) to access production systems. You need to configure user security to meet the requirements. Which tool should you use?

Options

  • ADynamics 365 Finance role-based security
  • BAzure Active Directory single sign-on
  • CDynamics 365 Fraud Protection
  • DAzure Active Directory conditional access

How the community answered

(34 responses)
  • A
    12% (4)
  • B
    6% (2)
  • C
    3% (1)
  • D
    79% (27)

Why each option

Azure Active Directory Conditional Access is the correct tool because it enforces both IP-based access restrictions and MFA requirements as policy-driven controls for any Azure AD-protected application including Dynamics 365 Finance.

ADynamics 365 Finance role-based security

Dynamics 365 Finance role-based security governs what actions authenticated users can perform within the application, but it has no capability to restrict access by IP address or enforce MFA at sign-in.

BAzure Active Directory single sign-on

Azure Active Directory single sign-on enables federated authentication across applications but does not itself enforce IP-based restrictions or MFA requirements - those controls require Conditional Access policies layered on top.

CDynamics 365 Fraud Protection

Dynamics 365 Fraud Protection is designed to detect and prevent fraudulent transactions in commerce and payment flows, and is unrelated to configuring network-based or MFA user access security.

DAzure Active Directory conditional accessCorrect

Azure AD Conditional Access policies allow administrators to define named locations (specific approved IP ranges) and require MFA as grant controls in a single unified policy. When a user attempts to access Dynamics 365 Finance from an unapproved IP or without satisfying MFA, access is blocked - directly satisfying both stated security requirements.

Concept tested: Azure AD Conditional Access for IP restriction and MFA enforcement

Source: https://learn.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Topics

#Azure Active Directory#Conditional Access#MFA#Security Configuration

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MB-700 Practice