Authentication in Microsoft Entra ID
SC-900 · Lesson 4 of 15 · 24:27
YouTube loads only after you press play. This chapter opens at its timestamp in the full course. Watch on YouTube ↗
In this lesson
Prepare for the SC-900 exam (Microsoft Security, Compliance, and Identity Fundamentals). In this lesson: authentication methods in Microsoft Entra ID (passwords, text messages and voice calls, whose Microsoft-provided versions retire from February 1, 2027, OATH tokens, Temporary Access Pass), passwordless and phishing-resistant methods (Windows Hello for Business, passkeys, certificate-based authentication), multifactor authentication and security defaults, Conditional Access for finer control, self-service password reset (security questions retiring in March 2027), and password protection with global and custom banned password lists. Includes three original practice questions.
Preview the topics
- A bank wants its admins to sign in with a method that a fake look-alike website can’t capture. Which method fits?
- A small company on the free tier of Entra ID wants MFA for everyone, and legacy authentication blocked, as quickly as possible. What should it turn on?
- Users at Contoso keep choosing passwords built on the company name, with a year or a symbol added. What should the admin set up?