The statement is True. Microsoft Entra Identity Secure Score is designed to reflect nuanced security postures. For many improvement actions, particularly those that apply to a population of users or devices, the score is calculated based on the percentage of completion. If an organization enables MFA for a subset of its users (such as administrators), it will receive partial points for the broader "all users" MFA control, proportional to the percentage of total users now protected. This allows organizations to get credit for incremental progress toward a better security posture.

This is a True/False style question. The statement accurately describes how scoring works for many improvement actions in Identity Secure Score, making 'A' (True) the only correct choice.

1. Microsoft Entra documentation. "What is the Microsoft Entra Identity Secure Score?". Microsoft Learn. learn.microsoft.com/en-us/entra/identity/monitoring-health/concept-identity-secure-score. "Each improvement action is worth 10 points or less

and in most cases

the score is given as a percentage of the configuration completed. For example

if you enable MFA for 50 of your 100 total users

you get 5 points (50% of the 10 total points available)."

2. Microsoft Entra documentation. "Improve your secure score". Microsoft Learn. learn.microsoft.com/en-us/entra/identity/monitoring-health/how-to-improve-secure-score. "Some recommendations are scored in a binary way... Others are scored as a percentage of the total configuration."