Exam SC-300 topic 2 question 108 discussion

Correct Answers: A. Windows Hello for Business B. a FIDO2 security key C. certificate-based authentication (multi-factor) Explanation: To meet the requirement of phishing-resistant multi-factor authentication (MFA) for administrative access, the authentication methods must be resistant to common phishing attacks. Microsoft recognizes the following as phishing-resistant MFA methods: Windows Hello for Business (WHfB) (A) Uses biometrics or PIN tied to a device. Passwordless and resistant to phishing attacks. FIDO2 Security Keys (B) Hardware-based authentication, passwordless, and phishing-resistant. Uses cryptographic keys stored on a physical device. Certificate-Based Authentication (Multi-Factor) (C) Uses a client certificate combined with another authentication factor. More secure than single-factor certificate-based authentication.