You are the administrator for a company. You plan to use Office 365 for email and file sharing. You plan to implement a hybrid deployment with your current on-premises Active Directory Domain Services (AD DS) environment and Microsoft Azure Active Directory (Azure AD) Connect.
You must deploy Microsoft Exchange Online and OneDrive for Business for all employees. You have the following security requirements:
All employees must use complex passwords.
Passwords must be changed every six months.
Employees must use multi-factor authentication (MFA) when possible.
You need to implement MFA verification options to use with the employee’s password.
Solution: Have the employee receive a phone call.
Does the solution meet the goal? phones after correctly entering their passwords.
A.
Yes
B.
No
Explanation:
MFA for Office 365 requires users to acknowledge a phone call, text message, or app notification on their smart
References: https://support.office.com/en-us/article/Set-up-multi-factor-authentication-for-Office-365-users-
8f0454b2-f51a-4d9c-bcde-2c48e41621c6
yes, but not recommended from a security perspective. At least in the US its too easy for an attacker to jack your mobile # (e.g. https://krebsonsecurity.com/2018/02/how-to-fight-mobile-number-port-out-scams/) or hack your business softphone number (unless MFA also).
I would recommend using Duo or other more fully-featured MFA platform.
At least its better than single factor. Unless you are the attacker 🙂 Got mailsniper?
0
1