Medium1 markMultiple Choice
Domain 2.5: Azure Identity, Access, and SecurityDomain 2IdentityConditional Access

AZ-900 · Question 35 · Domain 2.5: Azure Identity, Access, and Security

A company wants to require users to perform Multi-Factor Authentication (MFA) ONLY when they are logging in from outside the corporate office network. Which feature of Microsoft Entra ID should they use?

Answer options:

A.

Single Sign-On (SSO)

B.

Role-Based Access Control (RBAC)

C.

Conditional Access

D.

Passwordless authentication

How to approach this question

Look for the 'If/Then' logic in the scenario. IF outside network, THEN require MFA.

Full Answer

C.Conditional Access✓ Correct
Conditional Access
Conditional Access is the tool used by Microsoft Entra ID to bring signals together, make decisions, and enforce organizational policies. It acts as an 'if-then' statement: if a user is outside the corporate network, then require MFA.

Common mistakes

Choosing RBAC. RBAC is for authorization (what you can do), Conditional Access is for authentication rules (how you prove who you are).

Practice the full Azure Fundamentals AZ-900 Practice Exam 5

60 questions · hints · full answers · grading

More questions from this exam