MS-101 Exam - Question 17

Question

You configure a conditional access policy. The locations settings are configured as shown in the Locations exhibit. (Click the Locations tab.)

The users and groups settings are configured as shown in the Users and Groups exhibit. (Click Users and Groups tab.)

Members of the Security reader group report that they cannot sign in to Microsoft Active Directory (Azure AD) on their device while they are in the office.

You need to ensure that the members of the Security reader group can sign in in to Azure AD on their device while they are in the office. The solution must use the principle of least privilege.

What should you do?

Examice · Accepted Answer

To ensure that members of the Security reader group can sign in to Azure AD on their device while they are in the office, you need to create a named location. By defining a named location in the Azure Active Directory admin center and marking it as trusted, you can specify trusted IP ranges which can then be used in the conditional access policies. This approach follows the principle of least privilege by granting access based on the specified trusted locations.

MCSA11 · Answer

D. From the Azure Active Directory admin center, create a named location.

stromnessian · Answer

D for sure.  One of the most straightforward questions possible.  Add a named location IP range (in Azure AD portal -> Security -> Named locations) and mark it as trusted.

Prianishnikov · Answer

D. From the Azure Active Directory admin center, create a named location.

TonySuccess · Answer

You have the policy, so now you need the named location. D.

us3r · Answer

D is always the answer ;-)

KrokodilBLUEZZ · Answer

D is correct.

mkoprivnj · Answer

D is correct!

hosseny · Answer

D. From the Azure Active Directory admin center, create a named location.

Rstilekar · Answer

Conditional access policy has to work with Compliance policy. So i think the right answer should be C.

RascoPK · Answer

Notmsure this is right.
Nothing on MS page that would explain this anwser

MS-101 Exam - Question 17

Discussion