Microsoft
SC-300 · Question #153
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. User2 reports that he can only configure multi-factor authentication (MFA) t
Sign in or unlock SC-300 to reveal the answer and full explanation for question #153. The question stem and answer options stay visible for context.
Submitted by kavita_s· Mar 6, 2026Manage Azure Active Directory (Azure AD) identities and secure access - specifically configuring authentication methods and understanding the impact of Security Defaults on MFA registration options (AZ-104 / SC-300 Identity and Access Management)
Question
Hotspot Question You have an Azure Active Directory (Azure AD) tenant that contains the users shown in the following table. User2 reports that he can only configure multi-factor authentication (MFA) to use the Microsoft Authenticator app. You need to ensure that User2 can configure alternate MFA methods. Which configuration is required, and which user should perform the configuration? To answer, select the appropriate options in the answer area. NOTE: Each correct selection is worth one point. Answer:
Exhibit
Answer Area
- ConfigurationEnable access reviews.Enable Azure AD Privileged Identity Management (PIM).Modify security defaults.
- UserUser1 onlyUser2 onlyUser3 onlyUser1 and User2 onlyUser1 and User3 onlyUser2 and User3 only
Unlock SC-300 to see the answer
You've previewed enough free SC-300 questions. Unlock SC-300 for full answers, explanations, the timed quiz mode, progress tracking, and the master PDF. Question stem and options stay visible so you can still see what's on the exam.
Topics
#Azure AD Security Defaults#Multi-Factor Authentication (MFA)#Azure AD Roles and Permissions#Identity Management