You have a Microsoft 365 E5 tenant. The Microsoft Secure Score for the tenant is shown in the following exhibit. You plan to enable Security defaults for Azure AD. Which three improvement actions…

The correct answer is A. Require MFA for administrative roles B. Ensure all users can complete multi-factor authentication for secure access C. Enable policy to block legacy authentication. These basic controls include: Requiring all users to register for multifactor authentication Requiring administrators to do multifactor authentication Requiring users to do multifactor authentication when necessary Blocking legacy authentication protocols Protecting privileged…

Submitted by deeparc· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 E5 tenant. The Microsoft Secure Score for the tenant is shown in the following exhibit. You plan to enable Security defaults for Azure AD. Which three improvement actions will this affect? NOTE: Each correct selection is worth one point.

Exhibit

Options

ARequire MFA for administrative roles
BEnsure all users can complete multi-factor authentication for secure access
CEnable policy to block legacy authentication
DEnable self-service password reset
EUse limited administrative roles

How the community answered

(19 responses)

A
84% (16)
D
11% (2)
E
5% (1)

Explanation

These basic controls include: Requiring all users to register for multifactor authentication Requiring administrators to do multifactor authentication Requiring users to do multifactor authentication when necessary Blocking legacy authentication protocols Protecting privileged activities like access to the Azure portal https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals- security-defaults

Topics

#Azure AD Security Defaults#Multi-factor authentication (MFA)#Legacy authentication#Secure Score

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice