Microsoft Dynamics 365 Fundamentals Practice Exam

Can conditional access policies require MFA for users outside the company headquarters?

1. Yes

2. No

3. Only for remote workers

4. Only for external partners

The correct answer is: Yes

Conditional access policies in Microsoft Azure Active Directory (Azure AD) can indeed require multi-factor authentication (MFA) for users accessing resources from locations considered to be outside the defined trusted network perimeter, such as a company’s headquarters. When a user attempts to access applications or data from an untrusted location, the policy can enforce additional security measures, like MFA, to enhance protection against unauthorized access. This mechanism strengthens security, as it ensures that even if login credentials are compromised, access to sensitive information is limited unless a second factor of authentication is validated. Therefore, it is common practice for organizations to implement conditional access policies that enforce MFA for all users who are not connecting from their trusted office locations, thereby addressing security concerns associated with external access. In contrast, other options may imply limitations that are not part of the broader functionality provided by conditional access policies. The requirement for MFA isn’t confined only to remote workers or to external partners; it can apply broadly to any user outside of a secure location as defined by the organization’s policies.