Question

A small organization on Microsoft 365 Business Basic (no Entra ID P1/P2 licenses) wants to require multifactor authentication for all users with the least administrative effort and no additional cost. Which approach should the administrator use?

Accepted Answer

Enable security defaults in Microsoft Entra ID

Answer

Create a Conditional Access policy that requires MFA for all users

Answer

Configure Privileged Identity Management to require MFA on activation

Answer

Enable Identity Protection risk-based sign-in policies