easyMultiple Choice
MS-102 Practice Question: Ensure that all new users register for…
A company wants to ensure that all new users register for multi-factor authentication (MFA) within 14 days of account creation. Which Microsoft Entra ID feature should be used?
⚠ Common exam trap
Candidates often confuse Conditional Access policies (which enforce MFA at sign-in) with the registration campaign (which enforces the initial setup), leading them to select Conditional Access as the solution for a time-bound registration requirement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
MFA registration campaign
The MFA registration campaign in Microsoft Entra ID is specifically designed to enforce user registration for MFA within a defined time frame, such as 14 days. It targets new users and sends them reminders to register, blocking access until registration is completed, which directly meets the company's requirement.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
MFA registration campaign
Why this is correct
The MFA registration campaign is an Entra ID feature that proactively forces all users to register their MFA authentication methods within a configurable enforcement period (e.g., 14 days). It sends email and portal notifications, tracks registration completion, and blocks users who miss the deadline, making it the only option here that directly drives enrollment. This is exactly what 'ensure all new users register for MFA' requires, as it combines a hard deadline with communication and blocking.
- ✗
Conditional Access policy
Why it's wrong here
A Conditional Access policy that requires MFA only evaluates registration at sign-in time; if a user has not registered any authentication method, they are simply blocked without a guided registration flow. It cannot set a future deadline, send proactive reminders, or track registration status, so it doesn't encourage or manage the onboarding process. Thus, while it enforces MFA on existing registered users, it fails to 'ensure' that new users actually register—they remain unregistered until they happen to attempt access.
- ✗
Identity Protection
Why it's wrong here
Identity Protection automatically detects risky sign-ins and compromised credentials, and can trigger MFA or password reset based on risk levels, but it does not initiate MFA registration for new users. Its purpose is reactive remediation of potential attacks, not proactive enrollment of all accounts into authentication methods. Therefore, an unregistered user only faces MFA prompts if a risk event is detected, leaving many new users without MFA registration indefinitely and violating the 'all new users' requirement.
- ✗
Access Reviews
Why it's wrong here
Access Reviews in Entra ID are used for periodic attestation of access packages, group memberships, and role assignments, allowing reviewers to confirm or remove a user's existing entitlements. They do not configure authentication methods, enforce MFA enrollment, or interact with the Authentication Methods policy. As a result, Access Reviews are entirely unrelated to MFA registration and cannot influence whether a user sets up MFA, making them a governance tool rather than a security enforcement mechanism.
Go deeper
Related to this question
Learn chapter
Entra Connect Cloud Sync
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
MFA
Multi-Factor Authentication (MFA) is a security method that requires a user to verify their identity using two or more different types of evidence, such as a password plus a code from a phone, before they can access an account or system.
About these practice questions
One of 712 original MS-102 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.