CloudGuild · Blog · Cheat sheets · Lessons · Certifications
Mastering Azure MFA: A Walkthrough of an AZ-104 Exam Question
Navigate the complexities of Azure MFA implementation with this detailed AZ-104 exam question walkthrough.
Ensuring all users have Multi-Factor Authentication (MFA) enabled in Azure Active Directory can trip up many candidates. The options may seem similar, but only one truly enforces MFA across the board.
The question
You need to ensure that all users in your Azure Active Directory have MFA enabled. What should you do?
- A. Create a Conditional Access policy.
- B. Enable Azure AD Identity Protection.
- C. Set up password policies.
- D. Use Azure Security Center.
Think before you scroll
Before you move on to the answers, consider how each option relates to enforcing MFA. It’s crucial to understand not just what each option does, but how they specifically tie back to the requirement of enforcing MFA.
The answer
The correct option is A: Create a Conditional Access policy. This approach directly enforces MFA for users during the sign-in process, enhancing security effectively.
Why the other options lose
- B: Enable Azure AD Identity Protection. This feature assesses risk and provides insights into potential vulnerabilities, but it does not enforce MFA on its own. It helps identify when MFA might be necessary but lacks the capability to apply it universally.
- C: Set up password policies. Password policies can enforce complexity and expiration rules, but they do not enforce multi-factor authentication. Relying solely on passwords leaves accounts vulnerable.
- D: Use Azure Security Center. This tool provides security management and threat protection, but it does not directly manage user authentication methods like MFA. Its focus is broader and not specifically targeted at enforcing MFA.
The concept behind it
The concept here revolves around Conditional Access policies in Azure AD. These policies allow administrators to enforce specific conditions under which users must provide additional verification, such as MFA, thus enhancing security during the authentication process. Understanding how to configure Conditional Access effectively is crucial for managing Azure identities and governance.
Exam trap to remember
Remember: Always look for the option that directly enforces security measures like MFA rather than those that assess or manage risk.