MS-102 · Question #406
Your company has offices in Seattle and Denver. You have a Microsoft 365 subscription. You plan to create a Conditional Access policy named Policy1 that will enforce multifactor authentication…
The correct answer is A. a named location that has IP ranges location set to the Seattle office. To enforce MFA while excluding a specific office IP range in a Conditional Access policy, you'll need to configure a Named Location for your office IP range and then create a Conditional Access policy that includes all users and resources while excluding the named location…
Question
Your company has offices in Seattle and Denver. You have a Microsoft 365 subscription. You plan to create a Conditional Access policy named Policy1 that will enforce multifactor authentication (MFA). You need to ensure that users at the Seattle office are excluded from MFA. Users at the Denver office must always be prompted for MFA. What should you configure for Policy1?
Options
- Aa named location that has IP ranges location set to the Seattle office
- BAuthentication strengths
- Ca named location that has Countries location set to United States
- DVPN connectivity from the Seattle office
How the community answered
(38 responses)- A79% (30)
- B13% (5)
- C5% (2)
- D3% (1)
Explanation
To enforce MFA while excluding a specific office IP range in a Conditional Access policy, you'll need to configure a Named Location for your office IP range and then create a Conditional Access policy that includes all users and resources while excluding the named location. This allows MFA to be enforced globally, but those accessing from your office IP range will not be https://learn.microsoft.com/en-us/entra/id-governance/conditional-access-exclusion
Topics
Community Discussion
No community discussion yet for this question.