SC-100 Practice Question: Order the steps to configure a Conditional Access…

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

• ✓

  Assign users and groups → Assign cloud apps → Configure access controls (require MFA) → Enable policy

  Why this is correct

  This is the correct order because you must first define who (users/groups) and what (cloud apps) the policy applies to, then set the access control (require MFA), and finally enable the policy to take effect.

• ✗

  Assign cloud apps → Assign users and groups → Configure access controls (require MFA) → Enable policy

  Why it's wrong here

  This order is incorrect because while both assignments are necessary, the typical workflow in the Azure portal lists users and groups before cloud apps. More importantly, the sequence of defining what comes before how the access is controlled is not violated, but it deviates from standard practice and can cause confusion.

• ✗

  Enable policy → Assign users and groups → Assign cloud apps → Configure access controls (require MFA)

  Why it's wrong here

  This order is incorrect because you cannot enable a policy before it is fully configured. Enabling a policy without assignments and access controls would result in an incomplete policy that may not apply as intended or could cause unexpected behavior.

• ✗

  Assign users and groups → Configure access controls (require MFA) → Assign cloud apps → Enable policy

  Why it's wrong here

  This order is incorrect because you need to specify which cloud apps the policy applies to before setting the access controls. Otherwise, the access control (require MFA) is set without knowing which applications it should affect, leading to a misconfigured policy.

Go deeper

Related to this question