Hotspot Question An organization has a Microsoft 365 subscription. You plan to implement multi-factor authentication. For each of the following statements, select Yes if the statement is true. Otherwi

The correct answer is After users are enrolled in multi-factor authentication, they must configure a second authentication factor the next time they sign in. = Yes; Enabling multi-factor authentication requires an additional subscription purchase. = No; Complete multi-factor authentication by using text messages, a smartphone app, or a phone call. = Yes. The question tests fundamental knowledge of Microsoft 365 Multi-Factor Authentication (MFA) enrollment, licensing, and available verification methods.

Submitted by anjalisingh· Mar 5, 2026Describe security, compliance, privacy, and trust in Microsoft 365

Question

Hotspot Question An organization has a Microsoft 365 subscription. You plan to implement multi-factor authentication. For each of the following statements, select Yes if the statement is true. Otherwise, select No. NOTE: Each correct selection is worth one point. Answer:

Exhibit

Answer Area

After users are enrolled in multi-factor authentication, they must configure a second authentication factor the next time they sign in.Yes
Enabling multi-factor authentication requires an additional subscription purchase.No
Complete multi-factor authentication by using text messages, a smartphone app, or a phone call.Yes

Explanation

The question tests fundamental knowledge of Microsoft 365 Multi-Factor Authentication (MFA) enrollment, licensing, and available verification methods.

Approach. 1. Select 'Yes' for the first statement: When an administrator enables or enforces MFA for a user, Microsoft Entra ID interrupts their next interactive sign-in and forces them through a registration wizard to configure their second authentication factor. 2. Select 'No' for the second statement: Core MFA functionality (such as Security Defaults or per-user MFA) is included for free with all Microsoft 365 commercial subscriptions. 3. Select 'Yes' for the third statement: Microsoft fully supports SMS text messages, automated phone calls, and the Microsoft Authenticator smartphone app as valid secondary authentication methods.

Common mistakes.

common_mistake. A common mistake for the second statement is confusing basic MFA with Conditional Access. While policy-driven Conditional Access requires an additional premium license (Entra ID P1/P2), simply enabling basic MFA does not. For the first statement, users might incorrectly assume administrators configure the exact second factor for the end-user beforehand, rather than the user completing registration themselves.

Concept tested. Microsoft Entra ID Multi-Factor Authentication (MFA) user enrollment experience, licensing tiers, and supported authentication methods.

Reference. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Topics

#multi-factor authentication#MFA enrollment#authentication methods#Azure AD MFA

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice