Explanation/Reference:
Explanation:
Scenario: Enable Azure Multi-Factor Authentication (MFA) for the users in the finance department only.
Conditional Access is a feature of Azure Active Directory (Azure AD) that lets you control how and when users can access applications and services.

Note: In Azure Active Directory (Azure AD), you can create complex attribute-based rules to enable dynamic memberships for groups. Dynamic group membership reduces the administrative overhead of adding and removing users.
When any attributes of a user or device change, the system evaluates all dynamic group rules in a directory to see if the change would trigger any group adds or removes. If a user or device satisfies a rule on a group, they are added as a member of that group. If they no longer satisfy the rule, they are removed.
References:
https://support.microsoft.com/en-ae/help/4467879/conditional-access-and-multi-factor-authentication-in- flow
https://docs.microsoft.com/en-us/azure/active-directory/users-groups-roles/groups-dynamic-membership Question Set 4