Question
Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company has an Azure Active Directory (Azure AD) subscription.
You want to implement an Azure AD conditional access policy.
The policy must be configured to require members of the Global Administrators group to use Multi-Factor Authentication and an Azure AD-joined device when they connect to Azure AD from untrusted locations.
Solution: You access the Azure portal to alter the grant control of the Azure AD conditional access policy.
Does the solution meet the goal?
- A. Yes Correct
- B. No
Explanation
The solution meets the goal. The grant control of a Conditional Access policy is where you choose what users must satisfy to get access. In it you can select Require multifactor authentication together with the joined-device control (Require Microsoft Entra hybrid joined device) and choose Require all the selected controls, so both are enforced. The policy assignment targets the Global Administrators, and the untrusted locations are set in the policy's Locations condition, so these administrators must use MFA and a joined device only when they sign in from untrusted locations.
