Start here! Get your feet wet with the Microsoft cloud and begin your journey to earning your Microsoft Certified: Azure Fundamentals certification!
Prepare and test your skills

Prepare and test your skills

Worked example. The correct answer is already marked and every option is explained below, so there is nothing to select here. To answer questions yourself, start the free trial.
An IT administrator is creating a new Microsoft Entra Conditional Access policy to enforce additional security controls for users accessing cloud applications. Before fully enforcing the policy and potentially disrupting user sign-ins, the administrator wants to evaluate and monitor the impact of the policy decisions without actually blocking access or prompting users.
Which state should the administrator select for the policy toggle during creation?
Report-only mode is a policy state in Microsoft Entra Conditional Access that evaluates policy conditions and logs the hypothetical outcome of policy evaluations without enforcing grant or block access controls.
By setting the Enable policy toggle to Report-only, administrators can observe and log how the policy would behave across real-time user sign-in events. It records the simulated results directly in sign-in logs and reporting workbooks, enabling organizations to verify that the policy targets the intended users and applications without blocking legitimate activity or generating unexpected prompts.
Starting in Report-only mode aligns directly with best practices for testing and monitoring Conditional Access policies, providing measurable insights before active enforcement.
Keep the momentum going with these hand-picked practice scenarios
Want more questions like this?
Get a free certification question every week.