Microsoft Security, Compliance, and Identity Fundamentals (SC-900)Describe the capabilities of Microsoft EntraMedium
A security architect is designing an identity solution for a company that wants to eliminate passwords entirely for its workforce while maintaining a high level of security. They need a method that uses biometric or hardware-based authentication. Which technology in Microsoft Entra ID supports this requirement?
- AMicrosoft Entra B2C
- BMicrosoft Entra multifactor authentication (MFA)
- CMicrosoft Entra Domain Services
- DFIDO2 security keys
Show answer & explanationAnswer & explanation
Correct answer: D. FIDO2 security keys
FIDO2 security keys enable passwordless authentication using an external device (hardware) or biometrics, aligning perfectly with the goal of eliminating passwords while enhancing security.
Why the other options are wrong
- A. B2C manages customer identities, not general workforce passwordless sign-in.
- B. MFA adds a second factor but doesn't eliminate passwords as the primary factor.
- C. Domain Services provides managed AD for legacy apps, not passwordless authentication for users.
FIDO2 Security Keys
A set of open standards that enable passwordless authentication using various methods, including hardware security keys and biometrics.
- Offers phishing-resistant authentication.
- Supports both external hardware keys and built-in platform authenticators (e.g., Windows Hello).
- A key component of modern passwordless strategies.
Memory trick: FIDO2 is your digital fingerprint or secret key, no more remembering long passwords.