To protect your Azure virtual machines from being accessed by unauthorized users from the internet, you want to implement a solution that requires a second factor of authentication (MFA) and restricts access based on the user's location. Which service should you use?

Direct Answer (Verified)Reviewed by Sunny (Senior Cloud Engineer)

Correct Answer: Microsoft Entra Conditional Access

Conditional Access is the 'Zero Trust' policy engine in Azure that evaluates signals like identity, location, and device state before granting access....

๐Ÿ“‹Part of Microsoft Certified: Azure Solutions Architect Expert (AZ-305) ยท Azure Certification Practice
Real Exam ScenarioMicrosoft Entra ID

To protect your Azure virtual machines from being accessed by unauthorized users from the internet, you want to implement a solution that requires a second factor of authentication (MFA) and restricts access based on the user's location. Which service should you use?

โœ“ Correct Answer & ExplanationMicrosoft Entra ID

Correct Answer

Microsoft Entra Conditional Access

Why This Answer Is Correct

Conditional Access is the 'Zero Trust' policy engine in Azure that evaluates signals like identity, location, and device state before granting access.

๐Ÿ“š What This Question Tests

This question evaluates your knowledge of Microsoft Entra ID โ€” a core concept tested in Microsoft Certified: Azure Solutions Architect Expert (AZ-305). Understanding Microsoft Entra ID is essential for designing scalable, secure, and cost-effective cloud architectures. Mastery of this topic will help you answer scenario-based questions confidently on exam day.