Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Step Sequence / Reordering Question
Add and arrange the steps in the correct execution order.
Hotspot Solution:
User1 is in Group1, which is included in the conditional access policy. However, Montreal is an excluded location in the policy, and since the IP address 133.107.10.20 falls within the Montreal IP range, this location is excluded from the MFA requirement. User1 is on the MFA blocked list, but since MFA is not required for this location, being blocked from MFA would not prevent access. Answer: YES The IP address 193.77.10.15 is from Toronto, which is not in the excluded location list. Therefore, MFA is required based on the policy. Since User1 is on the MFA blocked list, they would not be able to complete the MFA process. Answer: NO User2 is in Group1 (included) and Group2 (excluded) in the conditional access policy. Since Group2 is excluded, User2 is not subject to this policy's conditions. User2 can access Office 365 from any location, including the Toronto IP range (193.77.10.20), without being blocked by the policy. Answer: YES
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
NNY Statement 1: User1 can access Microsoft Office 365 from a device that has an IP address of 133.107.10.20. User1's Groups: User1 is in Group1. The policy includes Group1. Location: 133.107.10.20 falls within the Montreal IP range (133.107.0.0/16). The policy excludes Montreal. MFA Blocked List: User1 is on the MFA blocked users list. This is a critical override; even if the policy would grant access, being on the MFA blocked list prevents access. Conclusion for Statement 1: No. User1 is on the MFA blocked users list, and the location is excluded by the policy.
NO: - User1 cannot access any cloud apps because User1 is on the MFA blocked users list, preventing them from completing the required MFA sign in. NO: -User1 cannot access Microsoft Office 365 because User1 is blocked from completing MFA. NO: -User2 is in Group1 and Group2. In conditional access the rule is that exclusions take precedence over inclusions, so User2 is not allowed to sign in being member of the exclusion group. When there is a Conditional Access Policy with locations as we have here: Excluded: Location Montreal: IP range 133.107.0.0/16. - The meaning of exclusion is that if you are in Montreal: - You are not allowed/blocked from signing in or accessing. Included: Any Location - which includes Toronto: IP range 193.77.10.0/24, and many other locations they might have you are allowed to sign in with MFA, and you have to be in Group1 (included)
User1 is in Group1, which is included in the conditional access policy. However, Montreal is an excluded location in the policy, and since the IP address 133.107.10.20 falls within the Montreal IP range, this location is excluded from the MFA requirement. User1 is on the MFA blocked list, but since MFA is not required for this location, being blocked from MFA would not prevent access. Answer: YES The IP address 193.77.10.15 is from Toronto, which is not in the excluded location list. Therefore, MFA is required based on the policy. Since User1 is on the MFA blocked list, they would not be able to complete the MFA process. Answer: NO User2 is in Group1 (included) and Group2 (excluded) in the conditional access policy. Since Group2 is excluded, User2 is not subject to this policy's conditions. User2 can access Office 365 from any location, including the Toronto IP range (193.77.10.20), without being blocked by the policy. Answer: YES