Microsoft 365 Fundamentals MS-900 Practice Question

The administrator should configure Conditional Access policies in Microsoft Entra ID. Conditional Access allows the creation of policies that trigger multi-factor authentication (MFA) based on specific conditions, such as the user's location. By setting up a policy that requires MFA when users sign in from outside trusted network locations, the administrator enhances security without impacting user experience within the corporate network. Enabling MFA for users in the Microsoft 365 admin center would require additional authentication every time, regardless of location, which may not be desired. Self-service password reset is a tool for users to reset their passwords without administrator assistance and doesn't address the requirement. Implementing password protection policies helps prevent the use of compromised passwords but does not involve additional authentication steps.