hard20 pts · first answer countsidentity-securitycloud-identityconditional-access
MFA policy that misses service principals
Your Conditional Access policy requires MFA for 'All users'. An attacker steals an app registration's client secret and calls Microsoft Graph from abroad. Why did the policy not stop it?
Discussion 0
Join free to post in the discussion.
Related questions
- Which login is really two-factor?Cybersecurity Analyst
- Why passwords are saltedCybersecurity Analyst
- Brute force or password spraying?Cybersecurity Analyst
- Authentication or authorization?Cybersecurity Analyst
- What a Kerberos TGT is forCybersecurity Analyst
- Where the Kerberos KDC runsCybersecurity Analyst
- Windows event for a failed logonCybersecurity Analyst
- Event for a locked-out accountCybersecurity Analyst