Explanation:

Box 1: Yes

System updates reduces security vulnerabilities, and provide a more stable environment for end users. Not applying updates leaves unpatched vulnerabilities and results in environments that are susceptible to attacks.

Box 2: Yes

Box 3: Yes

If you only use a password to authenticate a user, it leaves an attack vector open. With MFA enabled, your accounts are more secure.

Reference: https://docs.microsoft.com/en-us/azure/security-center/secure-score-security-controls

Explanation:

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/incidents-overview?view=o365-worldwide

Explanation:

Reference: https://docs.microsoft.com/en-us/microsoft-365/security/defender/threat-analytics?view=o365-

worldwide

Explanation:

Box 1: Yes

Box 2: No

Conditional Access policies are enforced after first-factor authentication is completed.

Box 3: Yes

Reference: https://docs.microsoft.com/en-us/azure/active-directory/conditional-access/overview

Explanation:

Reference: https://docs.microsoft.com/en-us/azure/governance/policy/overview

Explanation:

Federation is a collection of domains that have established trust.

Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed