Enforcing Multi-factor Authentication for Microsoft 365 Security in Sweden
Question
Your organization has a Microsoft 365 subscription, and you are responsible for implementing security methods.
Due to security reasons you wish to enforce Multi-factor authentication for all sign-in attempts that are originating from Sweden.
You will use Conditional Access to create the solution.
What should you configure?
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B. C. D.Correct Answer: B
You should define a named location in Conditional Access.
Here you can add Sweden as a named location.
/answer/imgckeditor_3.1.png)
/answer/imgckeditor_3.2_42_44.png)
Give the Named location policy a name.
Lastly create a new conditional access policy with conditions - locations - your named location settings:
/answer/imgckeditor_3.3_43_13.png)
Option A is incorrect.
This is an identity protection policy.
Option C is incorrect.
Making a role eligible in privileged access management is not correct.
Also we are to use Conditional access.
Option D is incorrect.
This is an identity protection policy.
To know more about conditional access named locations, please refer to the link below:
The correct answer for this scenario is A. A User Sign-in policy.
Explanation:
To enforce multi-factor authentication for all sign-in attempts originating from Sweden, we can create a User Sign-in policy with a Conditional Access rule. A User Sign-in policy is a set of rules that defines the user authentication experience, which includes password policies, user account lockout policies, and other settings that impact user sign-in.
We can create a Conditional Access policy to enforce multi-factor authentication for users signing in from specific locations. To do this, we can create a new policy with the following settings:
Assign the policy to a specific group of users or to all users in the organization.
Select the condition "Locations" and choose the location Sweden.
Select the action "Require multi-factor authentication".
Configure any other additional settings as required, such as allowing access for trusted devices or excluding specific applications.
Once the policy is created, it will apply to all sign-in attempts originating from Sweden and require multi-factor authentication.
Option B, a Named location, could be used to define the geographical location of Sweden. However, it is not sufficient to enforce multi-factor authentication for sign-in attempts from Sweden.
Option C, enabling an eligible role access through PIM, is not relevant to this scenario.
Option D, a User Risk Policy, is used to detect risky sign-ins and can be used in conjunction with Conditional Access policies. However, it does not enforce multi-factor authentication for specific locations.
