Microsoft Azure Administrator (AZ104) Practice Exam

What event leads to a user being blocked in Azure Multi-Factor Authentication?

1. Incorrect PIN entry

2. Account password expiration

3. Manual block by an administrator

4. Fraud alert report by the user

The correct answer is: Manual block by an administrator

A user can be blocked in Azure Multi-Factor Authentication through a manual block initiated by an administrator. This allows organizations to have granular control over security measures, such as when they identify suspicious activity associated with a user's account or when a user's behavior appears inconsistent with their normal usage patterns. Additionally, administrators can proactively block users to mitigate potential security risks or non-compliance with organizational policies. This is crucial in maintaining the integrity and security of the organization's resources. Options involving incorrect PIN entries or fraud alerts typically lead to temporary measures, such as lockouts or notifications, but do not result in an outright block from Multi-Factor Authentication. Similarly, account password expiration is a separate issue and would not directly lead to a user being blocked in this context.