SC-100 Practice Question 3898
Exam: SC-100
Domain: Design security operations, identity, and compliance capabilities
Difficulty: hard
You are designing an authentication strategy for a multinational enterprise. You need to enforce phishing-resistant Multi-Factor Authentication for all high-privilege administrators. Which authentication methods satisfy this requirement?
Answer Options
A
FIDO2 security keys, Windows Hello for Business, and Entra CBA
B
SMS text verification codes and voice phone calls
C
Email verification links sent to personal webmail
D
Security challenge questions and static 4-digit PINs
Correct Answer
A: FIDO2 security keys, Windows Hello for Business, and Entra CBA
Explanation
FIDO2 security keys, Windows Hello for Business, and Microsoft Entra Certificate-Based Authentication (CBA) are cryptographic, origin-bound methods that qualify as phishing-resistant MFA.