Authentication Methods
This process verifies that a person or device is who they claim to be.
What is authentication?
This security method requires users to provide more than one form of verification.
What is multifactor authentication (MFA)?
SSPR
What is Self-Service Password Reset?
This Microsoft Entra capability helps prevent users from choosing weak or commonly attacked passwords.
What is Microsoft Entra Password Protection?
This authentication approach allows users to sign in without entering a traditional password.
What is passwordless authentication?
Name the three authentication-factor categories.
What are something you know, something you have, and something you are?
This feature allows users to reset or change their own passwords without relying entirely on the IT help desk.
What is SSPR?
This list prevents users from choosing passwords containing weak or commonly used terms.
What is a banned password list?
This temporary credential can help a user sign in and register passwordless authentication methods.
What is a Temporary Access Pass (TAP)?
This Microsoft Authenticator feature requires the user to enter or select a number displayed during sign-in.
What is number matching?
Why should users register more than one authentication method for SSPR?
So they have another verification option if one method becomes unavailable.
An organization wants to prevent employees from using its company name in passwords. Which type of banned password list should it configure?
What is the custom banned password list?
This Microsoft authentication method can use a PIN or biometric information associated with a device.
What is Windows Hello for Business?
These Microsoft Entra settings provide baseline identity security protections, including requiring MFA in certain situations.
What are security defaults?
Who determines whether users must provide one or two authentication methods when resetting their password?
Who is the administrator/organization?
This attack tries one or a small number of common passwords against many different user accounts.
What is a password spray attack?
This phishing-resistant authentication credential is based on FIDO2 standards.
What is a passkey (FIDO2)?
This Microsoft Entra feature can require MFA based on factors such as the user's location, device, application, or sign-in risk.
What is Conditional Access?
This feature allows password changes made through Microsoft Entra to be written back to an organization's on-premises environment.
What is password writeback?
Name the four password evaluation techniques listed in the study guide.
What are normalization, fuzzy matching, substring matching, and score calculation?