SC-300 Azure AD Authentication Methods

Question 1

An administrator wants to enable passwordless authentication for users who use Windows 10 domain-joined devices. Which authentication method should they configure?

Accepted Answer

Windows Hello for Business

Answer

Windows Hello for Business is the passwordless solution designed specifically for Windows 10/11 domain-joined and Azure AD-joined devices, replacing passwords with biometric or PIN-based authentication tied to the device.

Question 2

Which Azure AD feature allows users to reset their own passwords without contacting the helpdesk?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Self-Service Password Reset (SSPR) enables users to reset or unlock their accounts without administrator intervention, reducing helpdesk load.

Question 3

What is the minimum number of authentication methods a user must register when SSPR is configured to require 2 methods?

Accepted Answer

2

Answer

When SSPR is configured to require 2 methods, users must register at least 2 authentication methods so they can use two different methods to verify their identity during reset.

Question 4

An organization wants to allow users to register both MFA and SSPR information in a single registration experience. Which Azure AD feature enables this?

Accepted Answer

Combined security information registration

Answer

Combined security information registration provides a unified registration experience where users can register their MFA and SSPR authentication methods in a single workflow at aka.ms/mysecurityinfo.

Question 5

Which authentication method in Azure AD uses a physical device compliant with the FIDO Alliance standards for passwordless sign-in?

Accepted Answer

FIDO2 security keys

Answer

FIDO2 security keys are physical hardware devices (like YubiKey) that comply with FIDO2/WebAuthn standards, enabling passwordless authentication without any shared secrets.

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 - Microsoft Identity and Access Administrator Practice Test

SC-300 Azure AD Authentication Methods