NEW
Font size
WorksheetsA Fusion of MFA and Conditional Access Strategies
Total questions: 10
Worksheet time: 2mins
1.Which of the following is NOT a common MFA factor?
Something you know
Something you have
Something you like
Something you are
2.What is the PRIMARY purpose of MFA?
a) To make passwords more complex
b) To add an extra layer of security to authentication
c) To replace passwords altogether
d) To prevent phishing attacks
3.Conditional access is a feature that allows organizations to:
a) Control access to resources based on certain conditions
b) Enforce MFA for all users
c) Simplify the login process
d) Monitor user activity
4.What is a common way to implement MFA?
a) Using a mobile app to generate codes
b) Requiring users to answer security questions
c) Using a physical token
d) All of the above
5. Which of the following is a benefit of using MFA?
a) Reduced risk of account compromise
b) Increased productivity
c) Lower IT costs
d) All of the above
6.Which of the following is NOT a common condition used in Conditional Access policies?
a) User location
b) Device compliance
c) User age
d) Application sensitivity
7.What is the primary purpose of Conditional Access in Microsoft Entra ID?
a) Grant access to all users for all resources.
b) Control access to resources based on specific conditions.
c) Manage user passwords and security questions.
d) Implement multi-factor authentication for all users.
8.What is the advantage of using Conditional Access over simply requiring MFA for all users?
a) It makes MFA easier to use for users.
b) It reduces the overall cost of implementing MFA.
c) It allows for more granular control over access based on different conditions.
d) It provides additional security features not available with MFA alone.
9.How can you configure Conditional Access to allow access for trusted administrators even from unmanaged devices?
a) Exclude administrators from all Conditional Access policies.
b) Create an exception group for administrators in the relevant policy.
c) Configure the policy to only apply during business hours.
d) Allow access from all devices without any restrictions.
10.What is the difference between sign-in risk policies and user risk policies in Conditional Access?
a) Sign-in risk policies focus on specific login events, while user risk policies consider overall user behavior.
b) Sign-in risk policies focus on external threats, while user risk policies focus on insider threats.
c) User risk policies are more granular than sign-in risk policies.
d) There is no difference, they are the same thing.
