You are developing a web app that uses Azure Active Directory (Azure AD) for authentication. You want to configure the web app to use multifactor authentication. What should you do? 

Answer options:

A. Enable mobile app authentication.
B. In Azure AD conditional access, enable the baseline policy.
C. In Azure AD, create a conditional access policy.
D. Install the Azure Multi-Factor Authentication Server.

C

MFA is enabled by conditional access policy. It is the most flexible means to enable two-step verification for your users. Enabling using conditional access policy only works for Azure MFA in the cloud and is a premium feature of Azure AD. Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-mfa-getstarted