Chapter 16, Implementing Multi-Factor Authentication

1. You deploy Multi-Factor Authentication (MFA) in your Azure AD tenant. You don't want your users to be required to enter any additional passwords or code in the browser when using MFA. Which two methods should you make available?
   1. Call to phone
   2. Text message to phone
   3. Notification through the mobile app
   4. Verification code from hardware token
2. Your company has an Azure AD tenant and an on-premises AD that are synced using Azure AD Connect. Your on-premises environment is running a mix of Windows Server 2012 and Windows Server 2016 servers. You use Azure MFA for multi-factor authentication. Users report that they are required to use MFA while using company devices. You need to turn MFA off for domain-joined devices. What should you do?
   1. Enable SSO on Azure AD Connect
   2. Create a conditional access rule to allow users to use either...