Your organization has a requirement to implement multi-factor authentication (MFA) for all users accessing sensitive resources in Azure AD. You need to ensure that MFA is enforced consistently and securely. What steps should you take to achieve this?