SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 2

Question 1

Which Microsoft Entra authentication method uses a time-based one-time passcode generated by an authenticator app?

Accepted Answer

TOTP via Microsoft Authenticator

Answer

Hardware FIDO2 key

Answer

SMS one-time passcode

Answer

Windows Hello for Business

Question 2

A user forgets their password and needs to reset it without contacting IT. Which Microsoft Entra feature enables this?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Conditional Access

Answer

Privileged Identity Management

Answer

Identity Protection

Question 3

Which of the following is NOT a supported SSPR verification method in Microsoft Entra ID?

Accepted Answer

Email to primary work address

Answer

Mobile app notification

Answer

Security questions

Answer

Mobile phone SMS

Question 4

What is the primary security benefit of passwordless authentication over traditional password-based methods?

Accepted Answer

It eliminates credentials that can be phished or stolen

Answer

It is faster to type

Answer

It requires less storage space

Answer

It works without internet connectivity

Question 5

When a user sets up Microsoft Authenticator for push notifications, what information does the app display to prevent MFA fatigue attacks?

Accepted Answer

Number matching and geographic context

Answer

The user's IP address

Answer

The exact time of the request

Answer

The user's department

Question 6

Which license is required to use Microsoft Entra ID SSPR in an organization?

Accepted Answer

Microsoft Entra ID P1 or P2

Answer

Microsoft Entra ID Free

Answer

Microsoft Entra ID P2 only

Answer

No license required for any tenant

Question 7

What does 'combined registration' mean in Microsoft Entra ID?

Accepted Answer

A single experience to register methods for both MFA and SSPR

Answer

Registering both a work and personal account simultaneously

Answer

Combining hardware and software tokens

Answer

Registering devices and users together