What should you do next?

You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com. From the Azure Active Directory blade, you assign the Conditional Access Administrator role to a user You need to ensure that Admin1 has just-in-time access as a conditional access administrator.

What should you do next?
A . Enable Azure AD Multi-Factor Authentication (MFA).
B . Set Admin1 as Eligible for the Privileged Role Administrator role.
C . Admin1 as Eligible for the Conditional Access Administrator role.
D . Enable Azure AD Identity Protection.

View Answer

Answer: A

Explanation:

Require MFA for admins is a baseline policy that requires MFA for the following directory roles:

– Global administrator?

– SharePoint administrator?

– Exchange administrator?

– Conditional access administrator?

– Security administrator?References:

https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/baseline-protection