As a step to harden your Office 365 security you wish to run Microsoft Office 365 Attack simulator. You configure Microsoft Defender Advanced Threat Protection and assign your users Microsoft 365 Enterprise E5 licenses. What must be configured to run the attack simulator?

Answer options:

A.Create Conditional Access session control scoped at Office 365.
B.Assign your users Defender plan 2-licenses.
C.Configure an identity protection user risk-policy.
D.Enable multi-factor authentication.

Correct Answer: D 
Enabling MFA is a prerequisite for running Microsoft Attack Simulator. 

Since the answer is given in the documentation, the other options are incorrect. 
Reference: 
To know more about Microsoft Office 365 Attack Simulator, please refer to the link below: 

https://docs.microsoft.com/en-us/microsoft-365/security/office-365-security/attack-simulator?view=o365-worldwide