QUESTION 13

You want to protect access to an application registered in Azure AD, by ensuring anyone
who accesses this application outside of the head office must use multi-factor
authentication.

Multi-factor authentication will not be required in any other situations at this stage.

Which of the following two items are required for this scenario?
One-time bypass

Named locations
Named locations can be used in this scenario to configure the head-office location by
public IP address.
Azure AD Conditional Access Policies
Azure AD Conditional Access Policies suit this scenario, in that MFA can be required
under specific conditions (specific application, for a given location).

Terms of use
Azure AD Identity Protection
Azure AD Identity Protection is focused on identifying risky sign-ins or accounts. It does
not allow policies to be conditionally set for requiring MFA based on an application and
location.