A legacy runbook still enables per-user MFA for fifteen engineers who open the Azure portal. What is the preferred modern enforcement path for MFA to Azure resources?
Select an answer to reveal the explanation.
Short Explanation
Per-user MFA is the old light switch behind the filing cabinet. Flip enforcement to Conditional Access pointed at Azure management—or security defaults if you have no P1—so you are not babysitting fifteen individual toggles.
Full Explanation
Legacy per-user MFA is superseded by tenant-wide approaches: Conditional Access policies targeting Azure management access, or Microsoft Entra security defaults when fine-grained Conditional Access is unavailable. Centralized policy improves consistency and supports exclusions such as emergency access accounts.