MS-102 Question 326

Community Discussion

Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.

• 4

  correct https://learn.microsoft.com/en-us/entra/identity/conditional-access/policy-old-require-mfa-azure-mgmt#create-a-conditional-access-policy

• 1

  JohnDoe is correct Authentication Strength (MFA isn't phishing resistant or paswordless Authentication strengths Administrators can specify an authentication strength to access a resource by creating a Conditional Access policy with the Require authentication strength control. They can choose from three built-in authentication strengths: Multifactor authentication strength, Passwordless MFA strength, and Phishing-resistant MFA strength. They can also create a custom authentication strength based on the authentication method combinations they want to allow. For an example, the built-in Phishing-resistant MFA strength allows the following combinations: Windows Hello for Business Or FIDO2 security key Or Microsoft Entra certificate-based authentication (Multifactor)

• 1

  Not fully correct. We need "Require authentication strength" to be able to select "Passwordless MFA". Simple MFA is not good enough here.