Preparing Practice Exam…
Please wait a moment while the system generates the exam questions, answers, and study session.
Please wait a moment while the system generates the exam questions, answers, and study session.
Microsoft Certified: Cybersecurity Architect Expert · Microsoft
Select one answer.
Written by other learners. Comments can disagree with the marked answer — check the official documentation when in doubt.
Where silly question - WHY, WHY would you Disable password less sign-in for sensitive accounts?? LOL
Slide 14 from MCRA: "Require separate accounts for Admins and enforce MFA/passwordless" This rules out B so I go with C & D.
B seems to be the most obvious answer, since MFA on all Admin accounts is the very basic best practice. C is most likely the case since company doesnt want to have the access given to anyone outside of onprem network. D is irrelevant in this case because the devices are part of the onprem network, which is not a big threat since option C will enforce the connectivity to be from internal network only.