Question
You have an Azure Virtual Desktop deployment and two Microsoft Entra groups named Group1 and Group2.
You create two Conditional Access policies named Policy1 and Policy2. Policy1 is assigned to Group1. Policy2 is assigned to Group2. Both policies include Azure Virtual Desktop as a cloud app.
You need to meet the following requirements:
- The users in Group1 must be prompted for multi-factor authentication (MFA) when they connect to Azure Virtual Desktop.
- The users in Group2 must reauthenticate every eight hours while they are connected to Azure Virtual Desktop.
Which settings should you configure in Policy1 and Policy2? To answer, select the appropriate options in the answer area.
NOTE: Each correct selection is worth one point.
Explanation
Policy1: configure Access controls: Grant and select Require multifactor authentication, which prompts Group1 users for MFA when they connect to Azure Virtual Desktop. Sign-in risk and user risk are conditions that decide when a policy applies, not controls that enforce MFA.
Policy2: configure Access controls: Session and set Sign-in frequency to periodic reauthentication every 8 hours. Sign-in frequency is a session control; the Grant control only decides what is required to get access, not how often users must sign in again.
