Implement and Manage Authentication MS-102 Practice Questions (Page 4)

Questions 16–20

1. 16expert · medium

   A user reports that they cannot sign in to a legacy application that uses basic authentication. The user has MFA enabled. The conditional access policy blocks legacy authentication. What is the most likely cause of the failure?

   • AThe user's password is incorrect.
   • BThe conditional access policy is misconfigured.
   • CThe legacy application does not support modern authentication, so MFA cannot be satisfied.
   • DThe user's MFA registration is incomplete.
   Reveal Solution Discussion Select an answer first
2. 17application · medium

   A company wants to implement a passwordless authentication method for users who work in a highly secure environment. They require a method that is resistant to phishing and does not require a smartphone. They also want to ensure that MFA is enforced for all users. What should they implement?

   • ATemporary Access Pass
   • BWindows Hello for Business
   • CMicrosoft Authenticator passwordless sign-in
   • DFIDO2 security keys
   Reveal Solution Discussion Select an answer first
4. 18application · medium

   A law firm wants to eliminate passwords for its 200 on-premises Active Directory users who use Windows 11 Pro workstations joined to Microsoft Entra ID. The firm requires that MFA still be enforced for all cloud resource access. The IT team has deployed FIDO2 security keys to all users. What must you configure to meet the requirement?

   • AEnable FIDO2 security keys as an authentication method in Microsoft Entra and configure the tenant to allow FIDO2 for the user group.
   • BConfigure the FIDO2 keys as a passwordless method but keep passwords enabled for MFA fallback.
   • CDeploy Windows Hello for Business instead, because FIDO2 keys cannot be used with hybrid-joined devices.
   • DAssign the users the Microsoft 365 Business Premium license to unlock FIDO2 support.
   Reveal Solution Discussion Select an answer first
5. 19foundation · easy

   Which passwordless authentication method in Microsoft Entra uses a physical device that supports WebAuthn and can be used to sign in to apps and websites?

   • AMicrosoft Authenticator app
   • BFIDO2 security key
   • COATH hardware token
   • DWindows Hello for Business
   Reveal Solution Discussion Select an answer first
6. 20application · medium

   A company wants to enforce stronger password policies for its 10,000 cloud-only users. The security team has identified that users often choose passwords like 'Contoso2024!' or 'Company123'. You need to prevent these specific patterns while still allowing users to choose their own passwords. What should you configure?

   • AEnable password hash synchronization and require password writeback.
   • BUse a custom script to periodically check passwords against a list of banned terms.
   • CSet a minimum password length of 16 characters and require three character classes.
   • DEnable Microsoft Entra Password Protection and add 'Contoso' and 'Company' to the custom banned passwords list.
   Reveal Solution Discussion Select an answer first