What should you do?

You have a Microsoft 365 Enterprise E5 subscription.

You need to enforce multi-factor authentication on all cloud-based applications for the users in the finance department.

What should you do?
A . Create on activity policy.
B. Create a Sign-in risk policy.
C. Create a session policy.
D. Create an app permission policy.

View Answer

Answer: B

Explanation:

You can configure a sign-in risk policy that applies to the Finance department users. The policy can be configured to ‘Allow access’ but with multi-factor authentication as a requirement.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-sign-in-risk-policy