Practice Test Geeks(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test
← All SC-900 Flashcard Decks

Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods Flashcards

7 cards from real SC-900 practice questions. Tap to flip, then mark Knew It or Still Learning — missed cards come back until you master them.

Read the first 7 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods flashcards as text

  1. Which Microsoft Entra authentication method uses a time-based one-time passcode generated by an authenticator app?

    Answer: TOTP via Microsoft Authenticator

    Microsoft Authenticator can generate TOTP (Time-based One-Time Passcode) codes that refresh every 30 seconds as a second authentication factor.

  2. A user forgets their password and needs to reset it without contacting IT. Which Microsoft Entra feature enables this?

    Answer: Self-Service Password Reset (SSPR)

    Self-Service Password Reset (SSPR) allows users to reset their own passwords after verifying their identity through registered authentication methods.

  3. Which of the following is NOT a supported SSPR verification method in Microsoft Entra ID?

    Answer: Email to primary work address

    SSPR cannot send verification to the user's primary work email because that account may be locked; it uses alternate email, mobile, or app methods instead.

  4. What is the primary security benefit of passwordless authentication over traditional password-based methods?

    Answer: It eliminates credentials that can be phished or stolen

    Passwordless authentication removes the shared secret (password) that attackers can steal through phishing, breaches, or credential stuffing attacks.

  5. When a user sets up Microsoft Authenticator for push notifications, what information does the app display to prevent MFA fatigue attacks?

    Answer: Number matching and geographic context

    Number matching requires users to enter a number shown on the sign-in screen into the app, while geographic context shows the location — both combat MFA fatigue attacks.

  6. Which license is required to use Microsoft Entra ID SSPR in an organization?

    Answer: Microsoft Entra ID P1 or P2

    SSPR requires Microsoft Entra ID P1 or P2 (or Microsoft 365 Business Premium), as it is not available in the Free tier.

  7. What does 'combined registration' mean in Microsoft Entra ID?

    Answer: A single experience to register methods for both MFA and SSPR

    Combined registration provides a unified portal where users register authentication methods that work for both MFA and SSPR in one workflow.