SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 5

Question 1

What is the role of a 'passkey' in Microsoft Entra ID authentication?

Accepted Answer

A FIDO2-based passwordless credential tied to biometrics or device PIN

Answer

Passkeys are FIDO2-based credentials that replace passwords, using device biometrics or PIN combined with public key cryptography for phishing-resistant sign-in.

Question 2

An administrator wants to enforce that all users in a high-security group use only phishing-resistant authentication methods. What is the correct approach in Microsoft Entra ID?

Accepted Answer

Create a Conditional Access policy requiring phishing-resistant MFA strength for the group

Answer

Conditional Access Authentication Strength policies allow admins to require specific method tiers (like phishing-resistant MFA) for particular users, groups, or scenarios.

Question 3

Which protocol do FIDO2 security keys use when communicating with a browser or platform during authentication?

Accepted Answer

WebAuthn/CTAP2

Answer

FIDO2 keys use the WebAuthn API (browser side) and CTAP2 protocol (between authenticator and device) to perform cryptographic authentication.

Question 4

How does Microsoft Entra ID handle authentication for users in regions where SMS delivery is unreliable?

Accepted Answer

Admins can enable alternative methods such as Microsoft Authenticator or FIDO2 keys in the Authentication Methods policy

Answer

Admins configure the Authentication Methods policy to enable alternative methods like Microsoft Authenticator or FIDO2, giving users options that don't rely on SMS infrastructure.

Question 5

What is the difference between MFA and passwordless authentication in Microsoft Entra ID?

Accepted Answer

MFA always requires a password plus a second factor; passwordless replaces the password entirely with strong factors

Answer

MFA combines a password with additional factors, while passwordless authentication eliminates the password and uses strong factors like biometrics or security keys alone.

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

(SC-900) Microsoft Security, Compliance, and Identity Fundamentals Exam Practice Test

SC-900 Microsoft Security, Compliance, and Identity Fundamentals Microsoft Entra Authentication Methods 5