Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft 365 Certified: Endpoint Administrator Associate · Microsoft
Hot Area / Sentence Completion
Select the appropriate option to complete the statement. Click Check Answer below to see the marked solution.
Hotspot Solution:
Copilot says : With Enable Security defaults set to Yes in a new Microsoft 365 E5 tenant, when a user signs in for the first time, they can use the Microsoft Authenticator app as their multi-factor authentication (MFA) method1. The user has 14 days to register for MFA from the first time they sign in after security defaults have been enabled2. After the 14-day period, if the user has not completed the MFA registration, they will not be able to sign in until the registration is completed
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Outdated. From Microsoft Docs (https://learn.microsoft.com/en-us/entra/fundamentals/security-defaults#require-all-users-to-register-for-microsoft-entra-multifactor-authentication): "Starting July 29, 2024, new tenants and existing tenants had the 14-day grace period for users to register for MFA removed. We are making this change to help reduce the risk of account compromise during the 14-day window, as MFA can block over 99.2% of identity-based attacks. " Correct answers: 1. Notification to Microsoft Authenticator app 2. 0 days
Copilot says : With Enable Security defaults set to Yes in a new Microsoft 365 E5 tenant, when a user signs in for the first time, they can use the Microsoft Authenticator app as their multi-factor authentication (MFA) method1. The user has 14 days to register for MFA from the first time they sign in after security defaults have been enabled2. After the 14-day period, if the user has not completed the MFA registration, they will not be able to sign in until the registration is completed
MS auth app is the DEFAULT Microsoft want us to use. You have the ability to setup SMS, email, voice call etc but the AUTHENTICATOR APP is MS's recommendation and automatically defaulted in every tenant unless specified otherwise.