Microsoft 365 Administrator Expert MS-102 Practice Question
You manage a Microsoft Entra tenant for Contoso Ltd. The SalesGroup users must use either FIDO2 security keys or Windows Hello for Business when signing in to Microsoft 365 from unmanaged devices. Other MFA methods, such as SMS, must not satisfy this requirement. You decide to enforce the requirement by using a single Conditional Access policy. Within the policy's Grant controls, which action should you configure?
Select Require device to be marked compliant and hybrid Azure AD joined.
Select Require authentication strength and choose Phishing-resistant MFA.
The Conditional Access grant control "Require authentication strength" lets administrators specify an authentication strength such as "Phishing-resistant MFA." That strength accepts only phishing-resistant methods-currently FIDO2 security keys, certificate-based authentication, and Windows Hello for Business-so SMS, voice, or app-based OTPs will not satisfy the policy. Selecting the generic "Require multi-factor authentication" would permit any MFA method, and device-based controls or a full block would not meet the scenario requirements.
Ask Bash
Bash is our AI bot, trained to help you pass your exam. AI Generated Content may display inaccurate information, always double-check anything important.
What is Microsoft Entra?
Open an interactive chat with Bash
What is Phishing-resistant MFA?
Open an interactive chat with Bash
What are Conditional Access Grant controls?
Open an interactive chat with Bash
Microsoft 365 Administrator Expert MS-102
Implement and manage Microsoft Entra identity and access
Your Score:
Report Issue
Bash, the Crucial Exams Chat Bot
AI Bot
Loading...
Loading...
Loading...
Pass with Confidence.
IT & Cybersecurity Package
You have hit the limits of our free tier, become a Premium Member today for unlimited access.
Military, Healthcare worker, Gov. employee or Teacher? See if you qualify for a Community Discount.
Monthly
$19.99
$19.99/mo
Billed monthly, Cancel any time.
3 Month Pass
$44.99
$14.99/mo
One time purchase of $44.99, Does not auto-renew.
MOST POPULAR
Annual Pass
$119.99
$9.99/mo
One time purchase of $119.99, Does not auto-renew.
BEST DEAL
Lifetime Pass
$189.99
One time purchase, Good for life.
What You Get
All IT & Cybersecurity Package plans include the following perks and exams .