Noos
PT EN
RAN-AZ900-00181
Ranvier · AZ900

Exam AZ900 Topics: architecture Difficulty: medium

A payments company suffered a phishing incident in which attackers captured employees' passwords. The security team now requires each sign-in to demand more than a password: after entering the password, each employee must approve the request on their registered phone before access is granted. Which approach does the team require at sign-in?

Options (Reading Mode) Click to filter discussion →
  1. A. Multifactor authentication, combining something the employee knows with something the employee has
  2. B. Single sign-on, using one trusted authentication to cover every application
  3. C. Passwordless authentication, replacing the password with a biometric or a hardware security key
  4. D. Longer passwords rotated more frequently, so that a stolen password becomes obsolete quickly
Reveal answer

Correct answer: Multifactor authentication, combining something the employee knows with something the employee has

Reference: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

02 — The Myelin Layer · Canonical Discussion

Where the exam tries to trick you — and how those who passed solved it.

0 Passed

contributed to this question

Answer Distractor Matrix Click an option to filter or open its dissection.
✦ Consolidated Synthesis (Wiki) rev. #1 (baseline) · CC BY-SA 4.0
Start synthesis for this question →

No community synthesis consolidated for this question yet. Below is the verifiable official starting point — if you passed the exam, open the option dissection.

Official Answer (A): Multifactor authentication, combining something the employee knows with something the employee has

Contribute to this Question

Your contribution builds your Orbital Sheath

Peer contributions

No public contribution yet. Be the first who passed to explain why the distractors trick candidates — your contribution builds your Orbital Sheath.