You have an Azure AD tenant named contoso.com that contains the resources shown in the following table. You create a user named Admin1. You need to ensure that Admin1 can enable Security defaults…

The correct answer is B. Delete CAPolicy1. To configure security defaults in your directory, you must be assigned at least the Security Administrator role. By default the first account in any directory is assigned a higher privileged role known as Global Administrator. Organizations that choose to implement Conditional…

Submitted by thandi_sa· Mar 6, 2026Implement authentication and access management

Question

You have an Azure AD tenant named contoso.com that contains the resources shown in the following table. You create a user named Admin1. You need to ensure that Admin1 can enable Security defaults for contoso.com. What should you do first?

Options

ADelete Package1.
BDelete CAPolicy1.
CAssign Admin1 the Authentication Administrator role for Au1.
DConfigure Identity Governance.

How the community answered

(40 responses)

A
10% (4)
B
73% (29)
C
13% (5)
D
5% (2)

Explanation

To configure security defaults in your directory, you must be assigned at least the Security Administrator role. By default the first account in any directory is assigned a higher privileged role known as Global Administrator. Organizations that choose to implement Conditional Access policies that replace security defaults must disable security defaults. (Imply that Conditional Access policies has conflict with security https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults

Topics

#Security defaults#Conditional Access#prerequisite#tenant configuration

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice