QuestionQ92Verified/MFA and IDAAS Configuration BasicsCopy linkReport a problemAsk AstroTutorSave questionHow can a Conditional Access policy stop a threat actor from using a privileged account?AAutomatically reset privileged account passwords every 30 daysBPrevent users from logging in outside business hoursCRequire multi-factor authentication when a privileged account is used from an endpoint outside the user's baselineDAudit RDP to identity unusual access by privileged usersShow AnswerAnswerExplanationMicrosoft Entra Conditional Access can combine sign-in signals with access controls such as requiring multifactor authentication. Sign-ins with unfamiliar properties, including a device or other endpoint outside the user’s normal baseline, can be treated as risky; requiring MFA prevents access when the actor cannot complete the additional verification.Learn moreRequire multifactor authentication for elevated sign-in riskWhat are risk detections?Show comments0Show commentsCommunity DiscussionNo comments yet. Be the first to start the discussion!
Community Discussion