SC-300 Azure AD Authentication Methods 2

Question 1

What is a Temporary Access Pass (TAP) in Azure AD?

Accepted Answer

A time-limited passcode that allows users to onboard or recover passwordless credentials

Answer

Temporary Access Pass (TAP) is a time-limited passcode issued by an administrator that lets users onboard passwordless authentication methods or regain access when they lose their primary credential.

Question 2

An administrator configures Authentication Strengths in Azure AD Conditional Access. What do Authentication Strengths define?

Accepted Answer

A combination of authentication methods that must be satisfied to access a resource

Answer

Authentication Strengths are a Conditional Access control that defines an allowable set of authentication method combinations (e.g., phishing-resistant MFA) that users must satisfy to gain access.

Question 3

Which Azure AD feature helps prevent MFA fatigue attacks by requiring users to enter a number displayed on the sign-in screen into the Authenticator app?

Accepted Answer

Number matching

Answer

Number matching requires the user to enter a two-digit number shown on the sign-in screen into their Microsoft Authenticator app, preventing accidental or malicious approval of MFA push requests.

Question 4

A company needs hardware-based OATH TOTP tokens for their security-sensitive accounts. Where in Azure AD are hardware OATH tokens managed?

Accepted Answer

Azure AD > Security > Authentication methods > OATH tokens

Answer

Hardware OATH tokens are managed in Azure AD > Security > Authentication methods > OATH tokens, where administrators can upload a CSV of token serial numbers and secret keys to assign to users.

Question 5

Which Azure AD authentication method allows users to sign in to Azure AD using a Microsoft Authenticator notification WITHOUT entering a password?

Accepted Answer

Passwordless phone sign-in (Microsoft Authenticator)

Answer

Passwordless phone sign-in through Microsoft Authenticator allows users to sign in by approving a notification on their phone, completely replacing the password with the device-bound credential.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Azure AD Authentication Methods 2