- [Narrator] You are required to understand and configure
the mullti-factor service settings for the exam.
You will find these settings from Azure Active Directory,
Users and then Multi-factor Authentication,
and then select Service Settings.
The first configuration setting is for app passwords.
Here, we can allow the users to create app passwords
to sign into non-browser apps.
Typically, these are legacy applications,
like Office 2010 and earlier, and Apple Mail,
which didn't support two-factor authentication.
Next, we have trusted IP's.
We can allow users to skip multi-factor authentication
if they're on the company Intranet.
If they're on the office network,
do you really need them to use MFA?
We can also include bypassing MFA from
specific subnets as well.
Here, you would enter in the range
of the IP address subnets.
Keep in mind that trusted IP's is only available
in the full version of Azure MFA.
The default MFA for users does not have this feature.
Configuring verification options is also
an exam objective and you should be familiar
with the various configurations.
As you can see, we have four methods that are
available to our users, call to phone,
text message to phone, notification through mobile app
and verification code from mobile app or hardware token.
And finally, remember multi-factor authentication.
Enabling this allows our users to forgo MFA
on devices for a specified number of days.
I know that every setting we covered here
is not an exam objective, but it's nice to have
a refresher every so often.