Microsoft Azure Architect Technologies (legacy) — Question 65

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com.
You need to enable two-step verification for Azure users.
What should you do?

Answer options

• A. Create an Azure AD conditional access policy.
• B. Configure a playbook in Azure Security Center.
• C. Enable Azure AD Privileged Identity Management.
• D. Install an MFA Server.

Correct answer: A

Explanation

The correct answer is A, as creating an Azure AD conditional access policy allows you to enforce multi-factor authentication for users. Options B and C are not directly related to enabling two-step verification, and D is outdated since Azure AD now supports built-in MFA without the need for an MFA Server.