A Fusion of MFA and Conditional Access Strategies

1.Which of the following is NOT a common MFA factor?

• Something you know

• Something you have

• Something you like

• Something you are

2.What is the PRIMARY purpose of MFA?

• a) To make passwords more complex

• b) To add an extra layer of security to authentication

• c) To replace passwords altogether

• d) To prevent phishing attacks

3.Conditional access is a feature that allows organizations to:

• a) Control access to resources based on certain conditions

• b) Enforce MFA for all users

• c) Simplify the login process

• d) Monitor user activity

4.What is a common way to implement MFA?

• a) Using a mobile app to generate codes

• b) Requiring users to answer security questions

• c) Using a physical token

• d) All of the above

5. Which of the following is a benefit of using MFA?

• a) Reduced risk of account compromise

• b) Increased productivity

• c) Lower IT costs

• d) All of the above

6.Which of the following is NOT a common condition used in Conditional Access policies?

• a) User location

• b) Device compliance

• c) User age

• d) Application sensitivity

7.What is the primary purpose of Conditional Access in Microsoft Entra ID?

• a) Grant access to all users for all resources.

• b) Control access to resources based on specific conditions.

• c) Manage user passwords and security questions.

• d) Implement multi-factor authentication for all users.

7. 8.What is the advantage of using Conditional Access over simply requiring MFA for all users?

• 7. a) It makes MFA easier to use for users.

• 7. b) It reduces the overall cost of implementing MFA.

• 7. c) It allows for more granular control over access based on different conditions.

• 7. d) It provides additional security features not available with MFA alone.

9.How can you configure Conditional Access to allow access for trusted administrators even from unmanaged devices?

• a) Exclude administrators from all Conditional Access policies.

• b) Create an exception group for administrators in the relevant policy.

• c) Configure the policy to only apply during business hours.

• d) Allow access from all devices without any restrictions.

10.What is the difference between sign-in risk policies and user risk policies in Conditional Access?

• a) Sign-in risk policies focus on specific login events, while user risk policies consider overall user behavior.

• b) Sign-in risk policies focus on external threats, while user risk policies focus on insider threats.

• c) User risk policies are more granular than sign-in risk policies.

• d) There is no difference, they are the same thing.