MS-102 · Question #432
You have a Microsoft 365 subscription that uses a third-party multifactor authentication (MFA) product. While reviewing Microsoft Secure Score, you discover that there are no points listed for the…
The correct answer is B. Modify the recommendation tags. When your organization uses a third-party MFA product, Microsoft Secure Score will not automatically award points for the 'Ensure MFA is enabled for all users' recommendation because it cannot detect the third-party solution. To receive the points with minimal administrative…
Question
You have a Microsoft 365 subscription that uses a third-party multifactor authentication (MFA) product. While reviewing Microsoft Secure Score, you discover that there are no points listed for the Ensure multifactor authentication is enabled for all users recommendation. You need to ensure that you receive all the points for the recommendation. The solution must minimize administrative effort. What should you do?
Options
- ADeploy a Microsoft Defender for Identity sensor.
- BModify the recommendation tags.
- CModify the status of the recommendation.
- DConfigure a data connector.
How the community answered
(30 responses)- A17% (5)
- B73% (22)
- C7% (2)
- D3% (1)
Explanation
When your organization uses a third-party MFA product, Microsoft Secure Score will not automatically award points for the 'Ensure MFA is enabled for all users' recommendation because it cannot detect the third-party solution. To receive the points with minimal administrative effort, you modify the recommendation tags (B) to mark the improvement action as 'Third party,' which signals to Secure Score that the control is addressed outside of Microsoft's native tooling and awards the associated points. This requires no changes to infrastructure. Deploying a Defender for Identity sensor (A) is unrelated to MFA scoring. Modifying the status (C) of the recommendation changes its tracking state (e.g., planned, accepted risk) but does not directly grant points for third-party coverage. Configuring a data connector (D) is an unrelated action.
Topics
Community Discussion
No community discussion yet for this question.