SC-300 Azure AD Authentication Methods 2

Question 1

What is a Temporary Access Pass (TAP) in Azure AD?

Accepted Answer

A time-limited passcode that allows users to onboard or recover passwordless credentials

Answer

A one-time SMS code valid for 30 days

Answer

A guest access token for B2B collaboration

Answer

A Conditional Access bypass for privileged accounts

Question 2

An administrator configures Authentication Strengths in Azure AD Conditional Access. What do Authentication Strengths define?

Accepted Answer

A combination of authentication methods that must be satisfied to access a resource

Answer

The complexity requirements for password policies

Answer

The encryption algorithm used for token signing

Answer

The session lifetime for authenticated users

Question 3

Which Azure AD feature helps prevent MFA fatigue attacks by requiring users to enter a number displayed on the sign-in screen into the Authenticator app?

Accepted Answer

Number matching

Answer

Authenticator Lite

Answer

Passwordless phone sign-in

Answer

Identity Protection risk-based MFA

Question 4

A company needs hardware-based OATH TOTP tokens for their security-sensitive accounts. Where in Azure AD are hardware OATH tokens managed?

Accepted Answer

Azure AD > Security > Authentication methods > OATH tokens

Answer

Azure AD > Users > Per-user MFA

Answer

Azure AD > Conditional Access > Authentication strengths

Answer

Azure AD > Identity Protection > Risk policies

Question 5

Which Azure AD authentication method allows users to sign in to Azure AD using a Microsoft Authenticator notification WITHOUT entering a password?

Accepted Answer

Passwordless phone sign-in (Microsoft Authenticator)

Answer

Software OATH token

Answer

SMS sign-in

Answer

Windows Hello for Business

Question 6

An organization is deploying Azure AD and wants to enforce MFA registration for all new users within 14 days of their first sign-in. Which feature should the administrator configure?

Accepted Answer

Identity Protection MFA registration policy

Answer

Conditional Access policy with MFA grant

Answer

Azure AD Security Defaults

Answer

Per-user MFA enforcement

Question 7

Which of the following authentication methods supports SMS as a verification option in Azure AD?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Windows Hello for Business

Answer

FIDO2 security keys

Answer

OATH hardware tokens