ExamGecko
Question list
Search
Search

Question 90 - SC-900 discussion

Report
Export

When security defaults are enabled for an Azure Active Directory (Azure AD) tenant, which two requirements are enforced? Each correct answer presents a complete solution.

NOTE: Each correct selection is worth one point.

A.

All users must authenticate from a registered device.

Answers
A.

All users must authenticate from a registered device.

B.

Administrators must always use Azure Multi-Factor Authentication (MFA).

Answers
B.

Administrators must always use Azure Multi-Factor Authentication (MFA).

C.

Azure Multi-Factor Authentication (MFA) registration is required for all users.

Answers
C.

Azure Multi-Factor Authentication (MFA) registration is required for all users.

D.

All users must authenticate by using passwordless sign-in.

Answers
D.

All users must authenticate by using passwordless sign-in.

E.

All users must authenticate by using Windows Hello.

Answers
E.

All users must authenticate by using Windows Hello.

Suggested answer: B, C

Explanation:

Security defaults make it easy to protect your organization with the following preconfigured security settings:

Requiring all users to register for Azure AD Multi-Factor Authentication.

Requiring administrators to do multi-factor authentication.

Blocking legacy authentication protocols.

Requiring users to do multi-factor authentication when necessary. Protecting privileged activities like access to the Azure portal.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/concept-fundamentals-security-defaults

asked 05/10/2024
Osman Rana
36 questions
User
Your answer:
0 comments
Sorted by

Leave a comment first