nerdexam
Microsoft

MS-721 · Question #144

You have a Microsoft 365 tenant that has Modem authentication enabled for all services Multi- factor authentication (MFA) is enforced for all users. You are deploying Microsoft Teams Rooms. The first

The correct answer is B. MFA is unsupported in Teams Rooms. Teams Rooms uses an automated, non-interactive sign-in process with a resource account, which is fundamentally incompatible with MFA since MFA requires user interaction to approve or enter a second factor.

Configure and manage Teams Rooms and devices

Question

You have a Microsoft 365 tenant that has Modem authentication enabled for all services Multi- factor authentication (MFA) is enforced for all users. You are deploying Microsoft Teams Rooms. The first time you attempt to sign in to a Teams Rooms, you receive an error message indicating that the device cannot sign in to Teams. You verify that Modern authentication is enabled in Teams Rooms. What prevents you from signing in?

Options

  • ATeams Rooms must be domain-joined first
  • BMFA is unsupported in Teams Rooms
  • CThe Microsoft Authenticator app is not configured for the Teams Rooms account
  • DThe Teams Rooms account is not licensed for Microsoft Intune

How the community answered

(38 responses)
  • A
    3% (1)
  • B
    84% (32)
  • C
    8% (3)
  • D
    5% (2)

Why each option

Teams Rooms uses an automated, non-interactive sign-in process with a resource account, which is fundamentally incompatible with MFA since MFA requires user interaction to approve or enter a second factor.

ATeams Rooms must be domain-joined first

Teams Rooms devices do not require domain-joining to sign in to Teams; they use a cloud-based resource account.

BMFA is unsupported in Teams RoomsCorrect

Microsoft Teams Rooms signs in automatically using a resource account without any user interaction at the device. MFA requires an interactive challenge such as approving a push notification or entering a one-time code, which cannot be completed in an unattended, automated sign-in flow. Microsoft explicitly documents that Teams Rooms accounts must be excluded from MFA Conditional Access policies for sign-in to succeed.

CThe Microsoft Authenticator app is not configured for the Teams Rooms account

Teams Rooms does not use the Microsoft Authenticator app for sign-in; the issue is that MFA as a whole is unsupported, not a missing app configuration.

DThe Teams Rooms account is not licensed for Microsoft Intune

An Intune license is not required for a Teams Rooms account to authenticate and sign in to the Teams service.

Concept tested: MFA incompatibility with Teams Rooms resource accounts

Source: https://learn.microsoft.com/en-us/microsoftteams/rooms/rooms-authentication

Topics

#Teams Rooms authentication#Multi-factor authentication (MFA)#Resource accounts#Teams Rooms deployment

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-721 Practice