A company wants to require users to perform Multi-Factor Authentication (MFA) ONLY when they are logging in from outside the corporate network. Which Microsoft Entra ID feature should they use?

Answer options:

Single Sign-On (SSO)

Role-Based Access Control (RBAC)

Conditional Access

Passwordless authentication

How to approach this question

Look for the feature that applies 'if-then' logic to login attempts.

Full Answer

C.Conditional Access✓ Correct

Conditional Access

Conditional Access is the tool used by Microsoft Entra ID to bring signals together, to make decisions, and enforce organizational policies. It acts as an 'if-then' statement for access (e.g., IF location is untrusted, THEN require MFA).

Common mistakes

Choosing RBAC. RBAC is for authorization (what you can do), Conditional Access is for authentication (how you prove who you are).

Question 34 All questions Question 36

Practice the full Azure Fundamentals AZ-900 Practice Exam 4

60 questions · hints · full answers · grading

A company wants to require users to perform Multi-Factor Authentication (MFA) ONLY when they are logging in from outside the corporate network. Which Microsoft Entra ID feature should they use?

How to approach this question

Full Answer

Common mistakes

Practice the full Azure Fundamentals AZ-900 Practice Exam 4

More questions from this exam