Explanation:

Multi-factor authentication is a process where a user is prompted during the sign-in process for an additional form of identification, such as to enter a code on their cellphone or to provide a fingerprint scan.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-mfa-howitworks

Explanation:

Box 1: Yes

Box 2: No

Conditional Access policies are enforced after first-factor authentication is completed.

Box 3: Yes

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Explanation:

Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

Explanation:

Microsoft Defender for Identity is a cloud-based security solution that leverages your on-premises Active Directory signals to identify, detect, and investigate advanced threats, compromised identities, and malicious insider actions directed at your organization.

Reference: https://docs.microsoft.com/en-us/defender-for-identity/what-is

Explanation:

Azure Active Directory (Azure AD) is a cloud-based user identity and authentication service.

Reference: https://docs.microsoft.com/en-us/microsoft-365/enterprise/about-microsoft-365-identity?view=o365-worldwide

Explanation:

Reference: https://docs.microsoft.com/en-us/cloud-app-security/what-is-cloud-app-security

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/ddos-protection/ddos-protection-overview

Explanation:

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/incidents-overview?view=o365-worldwide