SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 2

Question 1

Which Microsoft Entra authentication method uses a time-based one-time passcode generated by an authenticator app?

Accepted Answer

TOTP via Microsoft Authenticator

Answer

Microsoft Authenticator can generate TOTP (Time-based One-Time Passcode) codes that refresh every 30 seconds as a second authentication factor.

Question 2

A user forgets their password and needs to reset it without contacting IT. Which Microsoft Entra feature enables this?

Accepted Answer

Self-Service Password Reset (SSPR)

Answer

Self-Service Password Reset (SSPR) allows users to reset their own passwords after verifying their identity through registered authentication methods.

Question 3

Which of the following is NOT a supported SSPR verification method in Microsoft Entra ID?

Accepted Answer

Email to primary work address

Answer

SSPR cannot send verification to the user's primary work email because that account may be locked; it uses alternate email, mobile, or app methods instead.

Question 4

What is the primary security benefit of passwordless authentication over traditional password-based methods?

Accepted Answer

It eliminates credentials that can be phished or stolen

Answer

Passwordless authentication removes the shared secret (password) that attackers can steal through phishing, breaches, or credential stuffing attacks.

Question 5

When a user sets up Microsoft Authenticator for push notifications, what information does the app display to prevent MFA fatigue attacks?

Accepted Answer

Number matching and geographic context

Answer

Number matching requires users to enter a number shown on the sign-in screen into the app, while geographic context shows the location — both combat MFA fatigue attacks.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 2