You are the global administrator for an Azure Active Directory (Azure AD) tenant named adatum.com.You need to enable two-step verification for Azure users.What should you do?
From the MFA Server blade, you open the Block/unblock users blade as shown in the exhibit.Block/unblock users -A blocked user will not receive Multi-Factor Authentication requests. Authentication attempts for that user will be automatically denied. A user will remain blocked for 90 days from the time they are blocked. To manually unblock a user, click the "Unblock" action.What caused AlexW to be blocked?
You configure Azure AD Connect for Azure Active Directory Seamless Single Sign-On (Azure AD Seamless SSO) for an on-premises network.Users report that when they attempt to access myapps.microsoft.com, they are prompted multiple times to sign in and are forced to use an account name that ends with onmicrosoft.com.You discover that there is a UPN mismatch between Azure AD and the on-premises Active Directory.You need to ensure that the users can use single-sign on (SSO) to access Azure resources.What should you do first?
HOTSPOT -Your network contains an Active Directory domain named adatum.com and an Azure Active Directory (Azure AD) tenant named adatum.onmicrosoft.com.Adatum.com contains the user accounts in the following table.Adatum.onmicrosoft.com contains the user accounts in the following table.You need to implement Azure AD Connect. The solution must follow the principle of least privilege.Which user accounts should you use? To answer, select the appropriate options in the answer area.NOTE: Each correct selection is worth one point.Hot Area:
HOTSPOT -You have an Azure Active Directory (Azure AD) tenant.You need to create a conditional access policy that requires all users to use multi-factor authentication when they access the Azure portal.Which three settings should you configure? To answer, select the appropriate settings in the answer area.Hot Area:
You have an Azure Active Directory (Azure AD) tenant.You have an existing Azure AD conditional access policy named Policy1. Policy1 enforces the use of the AD-joined devices when members of the GlobalAdministrators group authenticate to Azure AD from untrusted locations.You need to ensure that members of the Global Administrators group will also be forced to use multi-factor authentication when authenticating from untrusted locations.What should you do?
