What should you do?

You have a Microsoft 365 Enterprise E5 subscription.

You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.

What should you do?
A . Create an activity policy.
B . Create a new app registration.
C . Create a conditional access policy.
D . Create a session policy.

View Answer

Answer: C

Explanation:

You can configure a conditional access policy that applies to the Finance department users. The policy can be configured to ‘Allow access’ but with multi-factor authentication as a requirement.

The reference below explains how to create a conditional access policy that requires MFA for all users. To apply the policy to finance users only, you would select Users and Group in the Include section instead of All Users and then specify the finance department group.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/howto-conditional-access-policy-all-users-mfa