Explanation
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-azure-mfa "Conditional Access policies can be set to Report-only if you want to see how the configuration would impact users, or Off if you don't want to the use policy right now. As a test group of users was targeted for this tutorial, lets enable the policy and then test Azure AD Multi-Factor Authentication.