Question
Your company has a single office in Istanbul and a Microsoft 365 subscription.
The company plans to use conditional access policies to enforce multi-factor authentication (MFA).
You need to enforce MFA for all users who work remotely.
What should you include in the solution?
- A. a fraud alert
- B. a user risk policy
- C. a named location Correct
- D. a sign-in user policy
Explanation
Define the Istanbul office IP range as a trusted named location, then create a Conditional Access policy that requires MFA for all locations except that named location, so only remote sign-ins are challenged. A fraud alert lets users report unexpected MFA prompts, and user risk or sign-in risk policies react to Identity Protection risk levels rather than to where the user works from.
