Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Default security settings are a preset group of identity security mechanisms that Microsoft automatically makes available in every tenant. Once enabled, these settings force all users to register for multifactor authentication, but they are especially strict with privileged identities. Users who hold built-in administrative roles (for example, Global Administrator, SharePoint Administrator, or Helpdesk Administrator) must complete a multifactor prompt at every sign-in. This continuous enforcement protects high-value accounts against attacks. The other options are incorrect because privileged users are not limited to location-based enforcement, cannot voluntarily skip MFA, and are never exempt simply because separate Conditional Access policies are absent.