A municipal Conditional Access policy requires multifactor authentication whenever Global Administrators and other privileged admins sign in. What describe-level idea does that policy illustrate?
Select an answer to reveal the explanation.
Short Explanation
Admins hold the keys to the city — so Conditional Access turns the MFA dial up for those roles every sign-in. Privileged accounts get tougher gates than everyday staff. That is the describe-depth story: stronger conditions for powerful roles.
Full Explanation
Conditional Access can require multifactor authentication based on user or role conditions, including always requiring MFA for privileged administrators. At Microsoft 365 Fundamentals depth, the takeaway is that privileged access deserves stronger authentication conditions. Disabling Entra ID, relying only on SharePoint permissions, or using Bookings are not Conditional Access privileged-access controls.