Practice Test GeeksSC-300 - Microsoft Identity and Access Administrator Practice Test
← All SC-300 Flashcard Decks

Azure AD Authentication Methods Flashcards

7 cards from real SC-300 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Azure AD Authentication Methods flashcards as text

  1. What is a Temporary Access Pass (TAP) in Azure AD?

    Answer: A time-limited passcode that allows users to onboard or recover passwordless credentials

    Temporary Access Pass (TAP) is a time-limited passcode issued by an administrator that lets users onboard passwordless authentication methods or regain access when they lose their primary credential.

  2. An administrator configures Authentication Strengths in Azure AD Conditional Access. What do Authentication Strengths define?

    Answer: A combination of authentication methods that must be satisfied to access a resource

    Authentication Strengths are a Conditional Access control that defines an allowable set of authentication method combinations (e.g., phishing-resistant MFA) that users must satisfy to gain access.

  3. Which Azure AD feature helps prevent MFA fatigue attacks by requiring users to enter a number displayed on the sign-in screen into the Authenticator app?

    Answer: Number matching

    Number matching requires the user to enter a two-digit number shown on the sign-in screen into their Microsoft Authenticator app, preventing accidental or malicious approval of MFA push requests.

  4. A company needs hardware-based OATH TOTP tokens for their security-sensitive accounts. Where in Azure AD are hardware OATH tokens managed?

    Answer: Azure AD > Security > Authentication methods > OATH tokens

    Hardware OATH tokens are managed in Azure AD > Security > Authentication methods > OATH tokens, where administrators can upload a CSV of token serial numbers and secret keys to assign to users.

  5. Which Azure AD authentication method allows users to sign in to Azure AD using a Microsoft Authenticator notification WITHOUT entering a password?

    Answer: Passwordless phone sign-in (Microsoft Authenticator)

    Passwordless phone sign-in through Microsoft Authenticator allows users to sign in by approving a notification on their phone, completely replacing the password with the device-bound credential.

  6. An organization is deploying Azure AD and wants to enforce MFA registration for all new users within 14 days of their first sign-in. Which feature should the administrator configure?

    Answer: Identity Protection MFA registration policy

    The Identity Protection MFA registration policy can target all users and requires them to register for Azure AD MFA within a grace period, prompting registration upon sign-in.

  7. Which of the following authentication methods supports SMS as a verification option in Azure AD?

    Answer: Self-Service Password Reset (SSPR)

    SSPR supports SMS as one of its authentication methods for identity verification during the password reset process, along with other methods like email, authenticator app, and security questions.