Plan, implement, administer Conditional Access

Which nine Microsoft Entra administrator roles require additional authentication to sign in?

Global, SharePoint, Exchange, Conditional Access, Security, Helpdesk, Billing, User and Authentication Administrators

Microsoft Entra Conditional Access (CA) analyzes signals, such as user, device, and location, to automate decisions and enforce organizational access policies for resource. True of False?

True

You can use CA policies to apply access controls like multifactor authentication (MFA). CA policies allow you to prompt users for MFA when needed for security and to stay out of users’ way when not needed. True of False?

True

Which License(s) do you need to use Conditional Access?

Microsoft Entra ID Premium 1 (or Microsoft 365 E3 and Up)

Which License do you need to use Risky sign-in, Risky Users, and risk based sign-in options?

Microsoft Entra ID Premium 2

Which accounts should you exclude from your CA policies?

Emergency Access, Break-glass, Service accounts and Service principals 

What does Conditional Access do?

It analyzes signals such as user, device, and location to enforce organizational access policies

When would you use Mobile Application Management (MAM) without enrollment to protect sensitive data in a work or school-related app?

Bring-your-own-device (BYOD) scenarios

What is user sign-in frequency?

User sign-in frequency defines the time period before a user is asked to sign in again when attempting to access a resource.