You plan to allow users to run internal applications from outside the company’s network.
You have a Windows Server 2012 R2 that has the Active Directory Federation Services (AD FS) role installed.
You must secure on-premises resources by using multi-factor authentication (MFA).
You need to design a solution to enforce different access levels for users with personal Windows 8.1 or iOS 8 devices.
Solution: You migrate the AD FS server to Microsoft Azure and connect it to the internal Active Directory instance on the network. Then, you use the
Workplace Join process to configure access for personal devices to the on-premises resources.
Does this meet the goal?
A.
Yes
B.
No
B: NO
You need Intune.
This comment above is wrong. Please follow Han’s instructions from the previous question for this series.
No
Does not mention MFA option.
Yes.
1. Authentication of a device can be allowed/denied depending on whether the device is unregistered/registered. 2. Certificate authentication can be required as the second authentication method. These settings are in the Global Authentication Policy/Multi-factor tab. The devices do not have to be Workplace joined for MFA. From pages 401-402 Exam Ref 70-414, Upgrading Your Skills to MCSA Windows Server 2012 R2 MS Press.
https://docs.microsoft.com/en-us/intune/introduction-intune
Answer: No
Windows domain-joined devices. Managed by System Center Configuration Manager (in the current branch) deployed in a hybrid configuration.
Windows 10 Mobile work or personal devices. Managed by Intune or by a supported third-party mobile device management system.
iOS and Android devices. Managed by Intune.
Source: https://docs.microsoft.com/en-us/azure/active-directory/active-directory-conditional-access
No