What should you do?

You have an Azure Active Directory (Azure AD) tenant.

You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of Azure AD-joined devices when members of the Global Administrators group authenticate to Azure AD from untrusted locations.

You need to ensure that members of the Global Administrators group will also be forced to use multi-factor authentication when authenticating from untrusted locations.

What should you do?
A . From the Azure portal, modify session control of Policy1.
B . From multi-factor authentication page, modify the user settings.
C . From multi-factor authentication page, modify the service settings.
D . From the Azure portal, modify grant control of Policy1.

View Answer

Answer: D