Question

You are preparing to deploy a new Conditional Access policy that requires MFA for all users accessing Microsoft 365 apps. Leadership is concerned that a misconfiguration could lock out users or disrupt business operations. Before enforcing the policy, you need to evaluate its real-world impact on actual sign-ins without affecting users. What should you do?

Accepted Answer

Create the policy with the state set to Report-only and review sign-in log results before enabling it.

Answer

Enable the policy but scope it to a pilot group of five users and monitor for support tickets.

Answer

Use the Conditional Access What If tool with sample user and app parameters, then enable the policy.

Answer

Create the policy in the On state and add all users to an exclusion group temporarily.