Microsoft Security, Compliance, and Identity Fundamentals — Question 105

What can you use to ensure that all the users in a specific group must use multi-factor authentication (MFA) to sign to Azure Active Directory (Azure AD)?

Answer options

• A. Azure Policy
• B. a communication compliance policy
• C. a Conditional Access policy
• D. a user risk policy

Correct answer: C

Explanation

The correct answer is C, a Conditional Access policy, as it specifically allows administrators to enforce MFA requirements based on user groups. Options A (Azure Policy), B (a communication compliance policy), and D (a user risk policy) do not provide the functionality to mandate MFA for user authentication in Azure AD.