Describe Authentication Capabilities of Microsoft Entra ID SC-900 Practice Questions (Page 5)

Questions 21–25

1. 21foundation · easy

   What is the primary role of biometric authentication in Microsoft Entra ID?

   • ATo store the user's password in the device
   • BTo provide a user-friendly and secure way to verify identity
   • CTo send a one-time code to the user's phone
   • DTo replace all other authentication methods
   Reveal Solution Discussion Select an answer first
2. 22foundation · easy

   Which of the following is an authentication method that Microsoft Entra ID supports for user sign-in?

   • AKerberos tickets from a third-party identity provider
   • BX.509 certificates issued by any certificate authority
   • CSAML assertions from any external system
   • DFIDO2 security keys
   Reveal Solution Discussion Select an answer first
4. 23foundation · easy

   Which of the following can be used as a method for multifactor authentication in Microsoft Entra ID?

   • AThe user's security questions
   • BThe user's job title
   • CThe user's email address
   • DA one-time passcode sent via SMS
   Reveal Solution Discussion Select an answer first
5. 24foundation · easy

   What is the primary purpose of multifactor authentication (MFA) in Microsoft Entra ID?

   • ATo require two or more forms of verification to reduce the risk of unauthorized access
   • BTo speed up the sign-in process for users
   • CTo allow users to sign in without any credentials
   • DTo eliminate the need for passwords entirely
   Reveal Solution Discussion Select an answer first
6. 25application · medium

   A company wants to allow users to reset their own passwords but only after verifying their identity with at least two methods. They have Microsoft Entra ID P1. What should the administrator configure in SSPR?

   • ASet the password expiration policy to require a new password every 30 days
   • BConfigure a Conditional Access policy that requires MFA for password changes
   • CSet 'Number of methods required to reset' to 2 and select the available verification methods
   • DEnable MFA for all users and set the MFA challenge to require two methods
   Reveal Solution Discussion Select an answer first