SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 4

Question 1

Which Microsoft Entra authentication method sends a push notification to a smartphone requiring user approval?

Accepted Answer

Microsoft Authenticator push notification

Answer

Microsoft Authenticator push notifications send an approval request to the user's registered phone, which they must accept to complete authentication.

Question 2

A user's phone is lost. Which action should an admin perform in Microsoft Entra ID to prevent unauthorized access via the lost phone's authenticator app?

Accepted Answer

Revoke all refresh tokens and remove the registered MFA device

Answer

The admin should revoke the user's refresh tokens (to invalidate active sessions) and remove the lost phone as a registered MFA device from the user's authentication methods.

Question 3

Which of the following best describes Certificate-Based Authentication (CBA) in Microsoft Entra ID?

Accepted Answer

Using a digital certificate on a smart card or device to authenticate without a password

Answer

CBA in Microsoft Entra ID allows users to authenticate using X.509 digital certificates stored on smart cards or devices, replacing passwords entirely.

Question 4

What does the Microsoft Entra ID Authentication Methods policy control?

Accepted Answer

Which authentication methods are enabled and for which users or groups

Answer

The Authentication Methods policy lets admins configure which methods (e.g., FIDO2, Microsoft Authenticator, SMS) are enabled and which users or groups can use them.

Question 5

Which scenario correctly describes where Windows Hello for Business stores its private key?

Accepted Answer

In a Trusted Platform Module (TPM) on the user's device

Answer

Windows Hello for Business stores the private key in the device's TPM chip, ensuring it never leaves the hardware and cannot be extracted remotely.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 4