SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

Question

You have a Microsoft Entra tenant and need to implement passwordless authentication.

The solution must meet these requirements:

Users can sign in without a password by using a mobile device.
New users signing in for the first time must use a helpdesk-issued sign-in method that expires.

Which authentication method should you enable for each requirement? Each method may be used once, more than once, or not at all.

Drag & Drop

Passwordless sign-in:

First-time sign-in for new users:

Explanation

Microsoft Authenticator supports passwordless phone sign-in, allowing users to authenticate from their mobile device without entering a password. A Temporary Access Pass is an administrator-issued, time-limited passcode that can bootstrap a new user into passwordless methods, making it appropriate for first-time sign-in.

Learn more

SC-500: Implementing End-to-End Security Controls for Cloud and AI Workloads

AstroTutor

Notes

Readiness

QuestionQ13

Community Discussion