Advanced Conditional Access Scenarios

Quiz covering Managing Security Controls for Identity

Questions in this quiz

A preview of the 5 questions covered. Start the quiz above to answer them, check your score, and read the explanations.

1. 1

   What are the two primary components that make up a Microsoft Entra Conditional Access policy?

2. 2

   An organization wants to enforce Multi-Factor Authentication (MFA) for all users except when they are connecting from the company's verified headquarters. How should the 'Locations' assignment be configured in the Conditional Access policy?

3. 3

   You need to ensure that users can only access the 'Finance' cloud app if their mobile device is managed by Microsoft Intune and meets the organization's security baseline. Which Grant control must be enabled?

4. 4

   A security administrator wants to prevent users from downloading or printing documents from SharePoint Online when they are on unmanaged, personal devices, while still allowing web-based editing. Which session control should be utilized?

5. 5

   A user is subject to two different Conditional Access policies. Policy A requires MFA for all users accessing 'All Cloud Apps'. Policy B is configured to 'Block' access for any user with a 'High' sign-in risk. If a user with a 'High' risk level attempts to log in to Outlook, what is the resulting behavior?