Question 23 of 88 from exam SC-300: Microsoft Identity and Access Administrator

Question 23 of 88 from exam SC-300: Microsoft Identity and Access Administrator

Question

HOTSPOT - You have an Azure Active Directory (Azure AD) tenant that has Security defaults disabled.

You are creating a conditional access policy as shown in the following exhibit.

New

Conditional access policy

Control user access based on conditional Control user access based on users and groups
access policy to bring signals together, to assignment for all users, specific groups of users,
make decisions, and enforce organizational directory roles, or external guest users.
policies. Learn more Learn more
Name* Include Exclude
[Policyt Y}] — Onone
OAllusers
Assignments © Select users and groups
Users a . All quest users (preview) @
Directory roles (preview) ©
Cloud apps or actions © > [7] Users ane groups
All cloud apps
Select ©
Conditions © >
> user

0 conditions selected

Usert
useri@sk200922outlook.onm..
Access controls

Grant ©
O controls selected

Session © >
O controls selected

Enable policy
Report-only

Off

Use the drop-down menus to select the answer choice that completes each statement based on the information presented in the graphic.

NOTE: Each correct selection is worth one point.

Hot Area:

Answer Area

To ensure that User is prompted for multi-factor authentication (MFA) ¥

when accessing Cloud apps, you must configure the [answer choice]. [Conditions settings
Enable policy setting

Grant settings
Sessions settings
Users and groups setting
To ensure that User is prompted for authentication every eight ¥

hours, you must configure the [answer choice]. [ Conditions settings
Enable policy setting
Grant settings

Sessions settings

Users and groups setting

Explanations