Medium1 markMultiple Choice

AZ-900 · Question 35 · Domain 2.5: Azure Identity, Access, and Security

Which Microsoft Entra feature allows you to require Multi-Factor Authentication (MFA) ONLY when a user attempts to log in from an unfamiliar location or device?

Answer options:

A.

Single Sign-On (SSO)

B.

Conditional Access

C.

Role-Based Access Control (RBAC)

D.

Microsoft Defender for Cloud

How to approach this question

Look for the feature that applies 'conditions' (if-then logic) to logins.

Full Answer

B.Conditional Access✓ Correct
Conditional Access is the tool used by Microsoft Entra ID to bring signals together, to make decisions, and enforce organizational policies. It acts as an 'if-then' statement: if a user wants to access a resource from an unknown location, then they must complete MFA.

Common mistakes

Choosing MFA directly. While MFA is the action taken, Conditional Access is the feature that evaluates the risk and decides *when* to prompt for MFA.

Practice the full Azure Fundamentals AZ-900 Practice Exam 7

60 questions · hints · full answers · grading

More questions from this exam