Question

You have created a new Conditional Access policy that will require MFA for all users accessing Microsoft 365 applications. Before enforcing it, leadership asks you to determine how many sign-ins would be blocked or challenged without actually affecting users. What should you do?

Accepted Answer

Set the policy state to Report-only and review the Conditional Access Insights and reporting workbook

Answer

Set the policy state to On and exclude all users except a small pilot group

Answer

Set the policy state to Off and use the What If tool for every user individually

Answer

Enable Security defaults and review the MFA registration report