A proposed Conditional Access policy allows any MFA method but the requirement specifically calls for phishing-resistant administrator sign-in. What should be recommended?

Choose the single best answer.

A.Assume every MFA method offers identical phishing resistance.
B.Grant a narrower resource role and omit sign-in controls.
C.Use an appropriate authentication strength and supported phishing-resistant methods, with tested recovery.
D.Use report-only permanently as the enforcement mechanism.

Show the answer and explanation

✓ Correct answer

Use an appropriate authentication strength and supported phishing-resistant methods, with tested recovery.

Method strength matters, so select supported methods meeting the stated assurance and plan recovery. MFA methods differ in phishing resistance. Narrow authorization does not satisfy the authentication requirement, and report-only measures impact without enforcing the access condition. Source: AZ-305 Study Guide.pdf, PDF page(s) 14.

Read the source reference

This item is flagged for content review.

Read and review here, or open the app to practise and save your results on this device.

Practise in the app

Unofficial study aid; not affiliated with or endorsed by Microsoft. Original practice questions are not real examination questions and do not guarantee an exam result.