SIMULATION Use the following login credentials as needed: To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in…

Submitted by takeshi77· Mar 6, 2026Implement and manage identity protection - specifically configuring MFA registration policies using Microsoft Entra ID Protection to target specific groups and exclude specific users without Conditional Access (aligned to SC-300: Microsoft Identity and Access Administrator or MS-102: Microsoft 365 Administrator Expert)

Question

SIMULATION Use the following login credentials as needed:

To enter your username, place your cursor in the Sign in box and click on the username below. To enter your password, place your cursor in the Enter password box and click on the password below. Microsoft 365 Username:[email protected] Microsoft 365 Password: =1122334455667788 If the Microsoft 365 portal does not load successfully in the browser, press CTRL-K to reload the portal in a new browser tab. The following information is for technical support purposes only:

Lab Instance: 99999999 You need to deploy multi factor authentication (MFA). The solution must meet the following requirements:

Require MFA registration only for members of the sg-Finance group.
Exclude Debra Berger from having to register for MFA.
Implement the solution without using a Conditional Access policy.

To complete this task, sign in to the appropriate admin center. Answer:

Exhibit

Explanation

The correct solution uses Microsoft Entra ID Protection's MFA Registration Policy, which is specifically designed to enforce MFA registration for targeted groups without requiring a Conditional Access policy. By navigating to Protection > Identity Protection > MFA Registration Policy, you can scope the policy to include only the sg-Finance group under 'Include' and then explicitly add Debra Berger under 'Exclude', satisfying all three requirements: group-scoped MFA registration, exclusion of a specific user, and no Conditional Access policy dependency. This built-in Identity Protection policy is the only native mechanism that enforces MFA registration workflows at the group level outside of Conditional Access.

Topics

#Multi-Factor Authentication#Identity Protection#MFA Registration Policy#Microsoft Entra ID

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice