Managing Modern Desktops (legacy) — Question 60

Your on-premises network contains an Active Directory domain named contoso.com.

You perform the following actions:

• Purchase a new Microsoft 365 subscription.
• Create a new user named User1.
• Assign User1 the Security Administrator role.

You need to ensure that User1 can enable Conditional Access policies.

What should User1 do first?

Answer options

• A. Register for Azure Multi-Factor Authentication (MFA).
• B. Request the Conditional Access Administrator role.
• C. Disable Security defaults.
• D. Implement Azure AD Connect.

Correct answer: C

Explanation

To enable Conditional Access policies, User1 must first disable Security defaults, as these settings can restrict the use of Conditional Access. The other options, such as registering for MFA or requesting a different role, do not directly address the prerequisite for enabling Conditional Access policies.