What should you do first?

You have an Azure Active Directory (Azure AD) tenant named conto.so.com that has Azure AD Identity Protection enabled. You need to Implement a sign-in risk remediation policy without blocking access.

What should you do first?
A . Configure access reviews in Azure AD.
B. Enforce Azure AD Password Protection.
C. implement multi-factor authentication (MFA) for all users.
D. Configure self-service password reset (SSPR) for all users.

View Answer

Answer: C

Explanation:

MFA and SSPR are both required. However, MFA is required first.

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/identity-protection/howto-identity-protection-remediate-unblock

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment