SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 3

Question 1

Which Microsoft Entra authentication method is considered most resistant to phishing attacks?

Accepted Answer

FIDO2 security keys

Answer

FIDO2 security keys are phishing-resistant because they use public key cryptography bound to the specific site's origin, so credentials cannot be intercepted and replayed on fake sites.

Question 2

A company wants to allow employees to sign in to Microsoft Entra ID using their fingerprint on a corporate laptop. Which technology enables this?

Accepted Answer

Windows Hello for Business

Answer

Windows Hello for Business uses biometrics (fingerprint, face) or PIN stored locally on the device to authenticate users to Microsoft Entra ID.

Question 3

What type of cryptography underpins FIDO2 and Windows Hello for Business?

Accepted Answer

Public key (asymmetric) cryptography

Answer

Both FIDO2 and Windows Hello for Business use asymmetric cryptography, where a private key stays on the device and the public key is registered with the identity provider.

Question 4

Which statement about SMS as an authentication method is accurate in the context of Microsoft Entra security guidance?

Accepted Answer

SMS is less secure than app-based methods due to SIM-swapping risks

Answer

SMS is vulnerable to SIM-swapping attacks where an attacker takes over a phone number, making it less secure than authenticator apps or FIDO2 keys.

Question 5

In Microsoft Entra ID, what is the purpose of the 'Temporary Access Pass' (TAP)?

Accepted Answer

A time-limited passcode to bootstrap passwordless credential registration

Answer

A Temporary Access Pass is a time-limited, admin-issued passcode that lets users sign in once to register passwordless methods like FIDO2 keys or Microsoft Authenticator.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 3