A junior security analyst at a media company is writing study notes about the authentication methods available in Microsoft Entra ID. The notes must state precisely what single sign-on, multifactor authentication, and passwordless sign-in each do. Which statement should the notes contain?

1. A. Single sign-on requires a hardware key at every sign-in; multifactor authentication covers one application at a time; passwordless still asks for the password on untrusted devices 💬 A
2. B. Single sign-on lets a user sign in once and access multiple applications; multifactor authentication requires credentials from more than one category; passwordless methods eliminate the password ✓ B
3. C. Single sign-on eliminates the password; multifactor authentication signs users in with no credential at all; passwordless adds a second factor to the password 💬 C
4. D. Single sign-on applies to Microsoft apps only; multifactor authentication replaces passwords with biometrics; passwordless rotates passwords automatically 💬 D

Reveal answer

Correct answer: Single sign-on lets a user sign in once and access multiple applications; multifactor authentication requires credentials from more than one category; passwordless methods eliminate the password

Reference: https://learn.microsoft.com/en-us/training/modules/describe-azure-identity-access-security/3-authentication-methods