Zenith Retail Global is designing a secure identity and access strategy using Microsoft Entra ID. The solution must map specific access control and threat mitigation requirements to the correct Microsoft Entra ID features. Match each security requirement on the left to its corresponding Microsoft Entra ID or Conditional Access feature on the right.
- Enforce that administrators re-authenticate every 4 hours when accessing administrative portals from untrusted locations.Conditional Access session control: Sign-in frequency
- Restrict web-based Outlook sessions on unmanaged devices to read-only access without file download capabilities.Conditional Access session control: App-enforced restrictions
- Require phishing-resistant multi-factor authentication (MFA) specifically when accessing a critical financial ledger application.Conditional Access grant control: Authentication strength
- Force a password change using self-service password reset if user credentials are found to be leaked on the dark web.Microsoft Entra ID Protection: User risk policy
Cevap
Sign-in frequency matches administrators re-authenticating every 4 hours; App-enforced restrictions matches restricting Outlook sessions to prevent downloads on unmanaged devices; Authentication strength matches requiring phishing-resistant MFA for the financial ledger application; User risk policy matches forcing a password change when credentials are leaked on the dark web.
The correct matches align each security requirement with its specific Entra ID capability: Sign-in frequency manages the session duration (4 hours); App-enforced restrictions leverage application capabilities to restrict downloads on unmanaged devices; Authentication strength specifies the exact allowed MFA methods (phishing-resistant); and User risk policy addresses compromised credentials (leaked on the dark web) by requiring a password reset.
Adım Adım Çözüm
Anahtar Kavram
Microsoft Entra ID Conditional Access controls and Microsoft Entra ID Protection policies.