Question
You have a Microsoft Entra tenant.
You need to implement passwordless authentication. The solution must meet the following requirements:
- Users can sign in without a password by using a mobile device.
- New users that sign in for the first time must use a helpdesk-issued sign-in method that expires.
Which authentication method should you enable for each requirement? To answer, drag the appropriate methods to the correct requirements. Each method may be used once, more than once, or not at all. You may need to drag the split bar between panes or scroll to view content.
NOTE: Each correct selection is worth one point.
Explanation
Microsoft Authenticator provides passwordless phone sign-in from a mobile device, so it meets the passwordless requirement. A Temporary Access Pass is a time-limited passcode that an administrator or helpdesk creates for a user, and its most common use is registering authentication methods during the first sign-in. Hardware OATH tokens are not a mobile device method and do not expire as an onboarding credential. SMS and voice call deliver codes to a phone the user has already registered, so they are neither helpdesk-issued nor expiring credentials.
