Microsoft Certified Identity And Access Administrator Associate · Free Practice Question Medium
Question 8
Your organization has been developing new conditional access policies to enhance its security posture. As the cloud administrator, you are worried about activating various policies, which may prevent access for the wrong users or applications. What is the simplest way to evaluate your policies' effect without impacting real users? Your solution should require minimal administrative effort.
-
A
Turn on Conditional Access Demo mode.
-
B
Create test applications that can be used for testing so you don't use live applications.
-
C
Create several test users and groups and modify the policies to only apply to those
users and groups.
-
D
Use the Conditional Access What If Policy.
Reveal correct answer
Correct answer: D
Explanation
Answer A is not correct because Conditional Access Demo mode is not a valid option in Azure.
Answer B is not correct because creating new test applications would require a lot of administrative work and is not the best solution for testing your conditional access policies.
Answer C is not correct because creating new users and groups would also require a lot of administrative work and is not the best solution for testing your conditional access policies.
Answer D is correct because the Conditional Access What If Policy generates a report detailing the impact of the conditional access policy if it was executed. This is a simple and low-administrative-effort method to test your conditional access policies.
If you want to learn more, go to:
The Conditional Access What If tool - Microsoft Entra ID | Microsoft Learn
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
