Note: The question is included in a number of questions that depicts the identical set-up. However, every question has a distinctive result. Establish if the solution satisfies the requirements.
Your company’s Azure solution makes use of Multi-Factor Authentication for when users are not in the office. The Per Authentication option has been configured as the usage model.
After the acquisition of a smaller business and the addition of the new staff to Azure Active Directory (Azure AD) obtains a different company and adding the new employees to Azure Active Directory (Azure AD), you are informed that these employees should also make use of Multi-Factor Authentication.
To achieve this, the Per Enabled User setting must be set for the usage model.
Solution: You reconfigure the existing usage model via the Azure CLI.
Does the solution meet the goal?
Select an option, then click Submit answer.
Reference / correct answer:
No. The MFA “usage model” (Per Authentication vs Per Enabled User) is tied to the MFA provider/licensing model and cannot be switched by “reconfiguring” it via Azure CLI. In Microsoft Entra ID (Azure AD), the recommended approach is to use Conditional Access (requires Entra ID P1/P2) or enable MFA per user; there is no Azure CLI operation to convert an existing MFA provider/usage model in-place.
Reference: https://learn.microsoft.com/en-us/entra/identity/authentication/howto-mfa-userstates
Reference: https://learn.microsoft.com/en-us/entra/identity/conditional-access/overview