An organization wants to require multifactor authentication only when users access cloud apps from unmanaged devices or from outside the corporate network. Which feature should be configured?

Question

Accepted Answer

B. Conditional Access. Conditional Access provides the granular if-then controls needed to require MFA based on signals such as device state, location, or target application. Option a is wrong because security defaults are broad baseline protections and don't provide that level of conditional targeting.

An organization wants to require multifactor authentication only when users access cloud apps from unmanaged devices or from outside the corporate network. Which feature should be configured?

Related Questions

Discussion