Question

A financial services company uses Microsoft Entra ID for identity management. Security auditors report that several accounts have been compromised via password-spray attacks against legacy protocols such as IMAP and POP3, which do not support multi-factor authentication. The security architect must recommend a solution that eliminates this attack vector for all users while allowing modern authentication clients to continue working normally. Which recommendation best meets the requirement?

Accepted Answer

Create a Conditional Access policy that targets all users and blocks access from clients using legacy authentication protocols.

Answer

Enable a Conditional Access policy that requires MFA for all cloud apps for every sign-in.

Answer

Configure a named location for the corporate office and require compliant devices for sign-ins from other locations.

Answer

Enable Identity Protection sign-in risk policy to require a password change on medium and high risk sign-ins.