nerdexam
Microsoft

MD-102 · Question #399

Your on-premises network contains an Active Directory domain named contoso.com. You perform the following actions: - Purchase a new Microsoft 365 subscription. - Create a new user named User1…

The correct answer is C. Disable Security defaults. Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals- security-defaults

Submitted by skyler.x· Apr 18, 2026Prepare infrastructure for devices

Question

Your on-premises network contains an Active Directory domain named contoso.com. You perform the following actions:

  • Purchase a new Microsoft 365 subscription.
  • Create a new user named User1.
  • Assign User1 the Security Administrator role.

You need to ensure that User1 can enable Conditional Access policies. What should User1 do first?

Options

  • ARegister for Azure Multi-Factor Authentication (MFA).
  • BRequest the Conditional Access Administrator role.
  • CDisable Security defaults.
  • DImplement Azure AD Connect.

How the community answered

(27 responses)
  • A
    11% (3)
  • B
    4% (1)
  • C
    81% (22)
  • D
    4% (1)

Explanation

Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults. https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals- security-defaults

Topics

#Conditional Access#Security defaults#Azure AD configuration#Identity protection

Community Discussion

No community discussion yet for this question.

Full MD-102 Practice