What can you use to ensure that all the users in a specific group must use multi-factor authentication (MFA) to sign in to Microsoft Entra?

The correct answer is C. a Conditional Access policy. Conditional Access policies in Microsoft Entra ID allow administrators to define granular access rules based on conditions such as user group membership, location, device state, and application. You can target a specific group and enforce MFA as a grant control, meaning users…

Submitted by thandi_sa· Apr 18, 2026Describe the capabilities of Microsoft Entra ID

Question

Options

AAzure Policy
Ba communication compliance policy
Ca Conditional Access policy
Da user risk policy

How the community answered

(26 responses)

A
4% (1)
C
88% (23)
D
8% (2)

Explanation

Conditional Access policies in Microsoft Entra ID allow administrators to define granular access rules based on conditions such as user group membership, location, device state, and application. You can target a specific group and enforce MFA as a grant control, meaning users in that group must complete MFA before being granted access. Azure Policy (A) governs Azure resource configurations, not user authentication. Communication compliance policies (B) monitor communications for regulatory violations. User risk policies (D) are part of Identity Protection and respond to detected risky sign-in behaviors automatically, but they are not the correct tool for enforcing MFA for a specific group unconditionally.

Topics

#Multi-factor authentication (MFA)#Conditional Access#Microsoft Entra ID#Identity Management

Community Discussion

No community discussion yet for this question.

Full SC-900 Practice