SC-300 Azure AD Authentication Methods

Question 1

An administrator wants to enable passwordless authentication for users who use Windows 10 domain-joined devices. Which authentication method should they configure?

Accepted Answer

Windows Hello for Business

Answer

FIDO2 security keys

Answer

Microsoft Authenticator phone sign-in

Answer

SMS-based authentication

Question 2

Which Azure AD feature allows users to reset their own passwords without contacting the helpdesk?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Azure AD Identity Protection

Answer

Privileged Identity Management

Answer

Azure AD Access Reviews

Question 3

What is the minimum number of authentication methods a user must register when SSPR is configured to require 2 methods?

Accepted Answer

2

Answer

1

Answer

3

Answer

4

Question 4

An organization wants to allow users to register both MFA and SSPR information in a single registration experience. Which Azure AD feature enables this?

Accepted Answer

Combined security information registration

Answer

Authentication Methods policy

Answer

Per-user MFA portal

Answer

Identity Protection registration policy

Question 5

Which authentication method in Azure AD uses a physical device compliant with the FIDO Alliance standards for passwordless sign-in?

Accepted Answer

FIDO2 security keys

Answer

Software OATH tokens

Answer

Microsoft Authenticator push notifications

Answer

Hardware OATH tokens

Question 6

A user reports they are no longer receiving MFA push notifications from the Microsoft Authenticator app. Which Azure AD portal should an administrator visit to re-register the user's authentication methods?

Accepted Answer

Azure AD > Users > Authentication methods

Answer

Azure AD > Security > MFA > User settings

Answer

Azure AD > Identity Protection > User risk

Answer

Azure AD > Conditional Access > Named locations

Question 7

Which report in Azure AD helps administrators identify users who have NOT registered for MFA?

Accepted Answer

Authentication methods activity report

Answer

Sign-in logs filtered by MFA result

Answer

Conditional Access policy report

Answer

Azure AD audit logs