Home / Microsoft / AZ-301 / Question 42

Your network contains an Active Directory domain named contoso.com that is federated to an Azure Active Directory (Azure AD) tenant. The on-premises domain contains a VPN server named Server1 that runs Windows Server 2016.

You have a single on-premises location that uses an address space of 172.16.0.0/16.

You need to implement two-factor authentication for users who establish VPN connections to Server1.

What should you include in the implementation?

• In Azure AD, create a conditional access policy and a trusted named location

• Install and configure Azure MFA Server on-premises

• Configure an Active Directory Federation Services (AD FS) server on-premises

• In Azure AD, configure the authentication methods. From the multi-factor authentication (MFA) service settings, create a trusted IP range

You need to download, install and configure the MFA Server.

Getting started with the Azure Multi-Factor Authentication Server