Exam MS-102 topic 1 question 346 discussion

JohnDoe is correct Authentication Strength (MFA isn't phishing resistant or paswordless Authentication strengths Administrators can specify an authentication strength to access a resource by creating a Conditional Access policy with the Require authentication strength control. They can choose from three built-in authentication strengths: Multifactor authentication strength, Passwordless MFA strength, and Phishing-resistant MFA strength. They can also create a custom authentication strength based on the authentication method combinations they want to allow. For an example, the built-in Phishing-resistant MFA strength allows the following combinations: Windows Hello for Business Or FIDO2 security key Or Microsoft Entra certificate-based authentication (Multifactor)

Not fully correct. We need "Require authentication strength" to be able to select "Passwordless MFA". Simple MFA is not good enough here.

Not quite correct. From the URL you provided... 1. Require multifactor authentication. "7. Under Access controls > Grant, select Grant access, Require multifactor authentication, and select Select." 2. Windows Azure Service Management API. "6. Under Target resources > Resources (formerly cloud apps) > Include > Select resources, choose Windows Azure Service Management API, and select Select."