Multi-factor authentication in Azure - Practice Problems & Coding Challenges

Challenge - 5 Problems

🧠 Conceptual

intermediate

What is the primary purpose of Multi-factor Authentication (MFA)?

Choose the best description of why MFA is used in cloud security.

A To require users to provide two or more verification factors to gain access, increasing security.

B To allow users to log in without passwords by using only biometric data.

C To enable single sign-on across multiple cloud services without additional verification.

D To automatically reset user passwords after every login attempt.

💡 Hint

Think about how MFA adds layers to protect user accounts.

MFA requires multiple proofs of identity, such as a password plus a code from a phone, making unauthorized access harder.

❓ Architecture

intermediate

Which Azure service is primarily used to enforce Multi-factor Authentication for users?

Select the Azure service that manages user identities and MFA enforcement.

A Azure Kubernetes Service

B Azure Virtual Machines

C Azure Blob Storage

D Azure Active Directory (Azure AD)

💡 Hint

Think about where user identities and access policies are managed in Azure.

Azure AD is the identity service that controls user authentication and MFA settings.

❓ Configuration

advanced

What is the effect of enabling Conditional Access policy requiring MFA for all users in Azure AD?

Consider this policy: "Require MFA for all users when accessing cloud apps." What happens when a user tries to sign in?

A Users only need MFA if they sign in from outside the corporate network.

B Users must complete MFA verification every time they sign in to any cloud app.

C Users are blocked from signing in unless they disable MFA on their account.

D Users can sign in without MFA if they use a trusted device.

💡 Hint

Think about what "require MFA for all users" means without exceptions.

This policy forces MFA every sign-in for all users, regardless of device or location.

❓ security

advanced

Which of the following is a common security risk if MFA is not enabled in Azure AD?

Identify the risk that increases significantly without MFA protection.

A Unauthorized access through compromised passwords.

B Increased storage costs due to data duplication.

C Slower network performance during peak hours.

D Automatic deletion of user accounts after inactivity.

💡 Hint

Think about what happens if only passwords protect accounts.

Without MFA, attackers who get passwords can access accounts easily, risking data and services.

❓ service_behavior

expert

What happens when a user with MFA enabled in Azure AD loses access to their authentication device?

Choose the correct behavior or recommended action in this scenario.

A Azure AD disables the user's account permanently for security reasons.

B The user can sign in using their password only, bypassing MFA automatically.

C The user cannot sign in until an administrator resets their MFA settings or provides a temporary access method.

D The user is automatically enrolled in a new MFA device without admin intervention.

💡 Hint

Consider how MFA recovery is handled securely.

Users must contact admins to reset MFA or use recovery options; bypassing MFA is not allowed by default.