nerdexam
Microsoft

MD-102 · Question #364

You have a Microsoft 365 subscription. You plan to use Conditional Access policies. You need to identify which scenarios the policies will support. Which two scenarios should you identify? Each…

The correct answer is A. Enforce multi-factor authentication (MFA) when users access a Microsoft Office 365 service. D. Block users from using legacy authentication when signing in to Microsoft Exchange Online. Azure AD Conditional Access operates at the authentication and authorization layer. It can enforce MFA when users sign in to cloud apps like Office 365 (A), and it can block legacy authentication protocols for services like Exchange Online (D). It cannot manage device patch…

Submitted by emma.c· Apr 18, 2026Protect devices

Question

You have a Microsoft 365 subscription. You plan to use Conditional Access policies. You need to identify which scenarios the policies will support. Which two scenarios should you identify? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AEnforce multi-factor authentication (MFA) when users access a Microsoft Office 365 service.
  • BForce users to renew an expired SSL certificate.
  • CForce users to update Windows Defender definition files before they sign in to Microsoft Office
  • DBlock users from using legacy authentication when signing in to Microsoft Exchange Online.
  • EForce users to install the latest Windows and Microsoft Office updates before they sign in to

How the community answered

(22 responses)
  • A
    68% (15)
  • B
    18% (4)
  • C
    5% (1)
  • E
    9% (2)

Explanation

Azure AD Conditional Access operates at the authentication and authorization layer. It can enforce MFA when users sign in to cloud apps like Office 365 (A), and it can block legacy authentication protocols for services like Exchange Online (D). It cannot manage device patch state such as Windows Defender definitions (C), Windows/Office update compliance (E), or SSL certificate lifecycle (B) - those are device configuration or compliance policy concerns, not access-control gate decisions.

Topics

#Conditional Access#Azure AD#MFA#Legacy Authentication

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice