PrepAway - Latest Free Exam Questions & Answers

Which three actions should you perform in sequence?

DRAG DROP
A company deploys an Office 365 tenant.
You need to enable multi-factor authentication for Office 365.
Which three actions should you perform in sequence? To answer, move the appropriate actions
from the list of actions to the answer area and arrange them in the correct order.

PrepAway - Latest Free Exam Questions & Answers

Answer:

Explanation:

34 Comments on “Which three actions should you perform in sequence?

  1. FishFenly says:

    That doesnt make sense to me George i think it would be:

    Create MFA per User model
    Enable MFA for all users
    Instruct single use password

    Single use password because you can setup up via mobile or email but either generates a single use password.

    Correct me if im wrong on this




    0



    0
  2. Bas says:

    Creating a Multi-factor authentication provider will take you from the Office 365 version (free) to the paid version. I guess the questions is wrong.

    1. enable…
    2. mobile Phone to complete registration
    3. create app password (not to complete registration, but to allow non-browser apps like outlook to use Multi-factor auth)




    0



    0
    1. Justin Thompson says:

      The article you reference says if you want to extend MFA, then you can purchase and create a provider, but the question doesn’t state any requirements that couldn’t be handled by the default MFA that is available.

      Multi-factor authentication is available by default for global administrators who have a Azure Active Directory tenant. However, if you wish to extend multi-factor authentication to all of your users and/or want to your global administrators to be able to take advantage features such as the management portal, custom greetings, and reports, then you must purchase and configure an Multi-Factor Authentication Provider.




      0



      0
  3. Chicksplash says:

    No — Agree with Slearsdude:
    Create a multi factor authentication provider with the per enabled user usage model
    Enable MFA for all users
    Instruct the user to use mobile to complete the process




    0



    0
  4. JSwift says:

    I think the answer would be:

    Create MFA provider with per enabled user usage model
    Enable MFA for all users
    Instruct users to user a mobile phone to complete the process.

    I came up with this using this thinking: You would need the MFA provider first, then enable for all users, then have the users complete the process.

    A per authentication usage model charges per authentication, typically used for an application, where as a per user usage model charges per enabled user, such as O365 (https://msdn.microsoft.com/en-us/library/azure/dn376346.aspx#create).

    Have a look at the page above and the one below and see if you come up with that same answer.

    https://technet.microsoft.com/en-us/library/dn383636.aspx#enablemfaoffice365




    0



    0
  5. Aric says:

    I am curious. Why would we instruct the user to do anything? The question asks nothing about the user. It says we need to enable MFA. That’s it. So, should we not: Create MFA per user, Create MFA per Auth, and then enable MFA?




    0



    0
  6. Jarmo Ekholm says:

    You don’t need to enable MFA providers. Those providers are for Azure MFA, in Office 365 you don’t do it. Correct answer is:

    1. Enable Multi-factor authentication for all user accounts
    2. Instruct users to obtain a single-use password to complete the registration process
    (email)
    Instruct users to use a mobile phone to complete the registration process
    (and all the subsequent authentications)




    0



    0
  7. Justin says:

    The answer is..

    1. Create a MFA provider with the Per Enabled User usage model.
    (https://msdn.microsoft.com/en-us/library/azure/dn376346.aspx#create, per this website, per enabled user is recommended for Office 365)

    2. Enable MFA for all user accounts.

    3. Instruct users to obtain single-use password to complete the registration process.

    You won’t create two seperate MFA models, they are different, and creating both means you’re paying for each authentication, AND each enabled user. You do need to enable MFA as it states here https://technet.microsoft.com/library/dn249466.aspx. And users will need to obtain a single-use password and complete the registration process before setting up their mobile phone which is also stated in the previous link.




    0



    0
  8. Justin Thompson says:

    The real Justin is about to weigh in 🙂

    I believe BAS is correct. If you read the following it clearly states creating a Multi-factor authentication provider is optional:

    https://technet.microsoft.com/library/dn249466.aspx

    Furthermore look at the following which outlines how to do this without creating the mult-factor auth provider:

    https://msdn.microsoft.com/en-us/library/azure/dn383636.aspx

    So I would say:

    Enable multi-factor authentication for all user accounts
    Instruct users to use a mobile phone to complete the registration process
    Instruct users to obtain a single-use password to complete the registration

    In looking at the comments this seems to be the popular opinion.




    0



    0
  9. Robinhood says:

    I agree with the real Justin.

    Enable MFA ( anyone who does not start with this option is wrong)
    AFter which you get a code by SMS or Call
    Then use that code to complete the registration.




    0



    0
  10. Spaceworm says:

    This is the Answer

    1. Before we can configure how we use MFA we must make sure we have an MFA provider*

    Click MULTI-FACTOR AUTH PROVIDERS, and then click CREATE A NEW MULTI-FACTOR AUTHENTICATION PROVIDER. In NAME, type Contoso-MFA, select the usage model (select the appropriate one) select “Per Enabled User”,

    2. Enable Users in my Directory to use MFA

    If you create a new users in your directory all you will need is to do is select the “Enable Multi-Factor Authentication” check box.

    3.Configure The MFA provider

    http://blogs.technet.com/b/canitpro/archive/2014/08/14/step-by-step-enable-multi-factor-authentication-in-azure.aspx

    Configure MFA settings such as Caching, Voice massages and notifications received by users ~(ie USE A MOBILE)

    So to sum up the correct answer is:

    1 Create a multi-factor authentication provider with the pre enabled user usage model
    2 Enable multi-factor authentication for all user accounts
    3 Instruct Users to use a mobile phone to complete the registration process




    0



    0
  11. Charles Simard says:

    According to this site : https://azure.microsoft.com/en-us/documentation/articles/multi-factor-authentication-get-started-cloud/

    You can skip step 1 and 2…so no need to create a provider…

    Now that we have determined that we are using multi-factor authentication in the cloud, let’s get going! Please note that if you are using Multi-Factor Authentication for Office 365 or Multi-Factor Authentication for Azure Administrators you can skip to step 3. Also, this document deals with

    1. Sign up for an Azure subscription
    If you do not already have an Azure subscription, you need to sign-up for one. If you are just starting out and exploring using Azure MFA you can use a trial subscription

    2. Create a Multi-Factor Auth Provider or assign an Azure AD Premium or Enterprise Mobility
    Suite license to users
    You will need to either create an Azure Multi-Factor Auth Provider and assign it to your directory or assign licenses to your Azure AD Premium or EMS users. Azure Multi Factor Authentication is included in Azure Active Directory Premium and as a result it is also included with the Enterprise Mobility Suite. If you have Azure AD Premium or EMS you do not need to create a Multi-Factor Auth Provider, rather to enable MFA for an Azure AD Premium or EMS user, an Azure AD Premium or EMS license needs to be assigned to that user and then an Administrator can assign MFA to the user through the management portal. See the section below on how to assign licenses to users.

    Turn on Multi-Factor Authentication for your users
    3. Enable Azure MFA on your users either through the Office 365 or Azure portal. See the section below for information on how to do this.

    Send email to end users to notify them about MFA
    4. Once a user has had multi-factor authentication turned on for their account, it is recommended that you send them an email notifying them of this. The user will be prompted to complete the process the next time they sign-in, so this lets them no what to expect. See the section below for an example email template.




    0



    0
  12. Aleza john says:

    You can check the right answers of any Microsoft Question on Examstraining. Examstraining provide valid Microsoft certification question answers. Study every question until you know why it is correct because some of the questions are slightly different in the exam – but if you understand the questions here you can get them right.
    http://www.examstraining.com/




    0



    0

Leave a Reply