Start here! Get your feet wet with the Microsoft cloud and begin your journey to earning your Microsoft Certified: Azure Fundamentals certification!
Prepare and test your skills
Prepare and test your skills
Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An organization is migrating its enterprise applications to Azure and wants to establish strict authentication controls. The security team needs to enforce multi-factor authentication (MFA) specifically for external guest accounts accessing management resources, while allowing administrators to customize signals, target specific apps, and evaluate conditions before granting access.
Which feature should the organization implement to meet these requirements?
Conditional Access is the identity-driven control plane in Microsoft Entra ID (formerly Azure Active Directory) that evaluates real-time signals to enforce organizational access policies. It functions as an "if-then" engine that analyzes context—such as user identity, location, device health, and targeted application—before determining whether to allow, block, or challenge a sign-in attempt.
Compared to basic baseline settings, Conditional Access provides the full customization and granularity necessary to enforce strict, condition-based security requirements across heterogeneous user populations.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.
StudyCerts
StudyCerts