Due to a recent company acquisition, you have inherited a new Azure tenant with 1 subscription associated that you have the manage. The security has been neglected and you are looking for a quick…

Question

Options

• AEnable Security Defaults
• BConfigure Conditional Access Policies
• CConfiguring an Azure Policy
• DUtilize Active Directory Sign-In Logs

• A
  74% (40)
• B
  7% (4)
• C
  15% (8)
• D
  4% (2)

Explanation

Security Defaults vs. Other Security Options

Option A is correct because Security Defaults is a pre-built, one-click solution in Azure AD that automatically enforces the most common security baselines - including requiring MFA registration for all users, blocking legacy authentication protocols, and protecting privileged actions like Azure portal access - making it the lowest-effort option for quickly securing a neglected tenant.

The distractors fall short for these reasons:

• Option B (Conditional Access Policies) can achieve the same goals but requires significant administrative effort to configure, test, and maintain individual policies - the opposite of "least administrative effort"
• Option C (Azure Policy) governs Azure resource compliance (e.g., ensuring VMs have encryption enabled) and has nothing to do with identity authentication security settings
• Option D (Sign-In Logs) is purely a monitoring/diagnostic tool and cannot enforce any security settings whatsoever

Memory Tip: Think of Security Defaults as the "starter pack" for Azure AD security - it's Microsoft's pre-configured bundle of the most essential identity protections, ideal when you need broad coverage with minimal setup. If you need customization or granular control, that's when you graduate to Conditional Access Policies.

No community discussion yet for this question.