SC-300 Exam - Question 81

Question

Your company has a Microsoft 365 tenant.

The company has a call center that contains 300 users. In the call center, the users share desktop computers and might use a different computer every day. The call center computers are NOT configured for biometric identification.

The users are prohibited from having a mobile phone in the call center.

You need to require multi-factor authentication (MFA) for the call center users when they access Microsoft 365 services.

What should you include in the solution?

Examice · Accepted Answer

Given that the call center users share desktop computers, which are not configured for biometric identification, and mobile phones are prohibited, configuring multi-factor authentication must bypass the need for both biometrics and mobile devices. Options like using a named network location would not provide adequate security since it does not fulfill the requirements for MFA. The Microsoft Authenticator app is not viable as mobile phones are not allowed. Windows Hello for Business requires either biometric identification or PIN, and since these users switch computers daily, storing such data locally is impractical. FIDO2 tokens are hardware-based authentication devices that provide a viable, secure, and portable solution for multi-factor authentication without the need for biometrics or mobile phones, making them the most suitable option.

Ed2learn · Answer

ignoring the terrible working conditions, terribly configured network (or you would just set MFA and CA to ignore that network segment), and obviously micromanaging bosses - the given answer is correct.

Beitran · Answer

The only logical option.

ali_pin · Answer

A. a named network location - not an MFA option
B. the Microsoft Authenticator app - no mobile phones allowed
C. Windows Hello for Business authentication - no biometrical options in the office and the data is stored in the local device -  they switch PCs every day

so D. FIDO2 key

bleedinging · Answer

D. This one is clever. Windows hello for Business would require each user to scan their faces for each computer. It wouldn't be a viable solution. it'd have to be Fido2 instead.

Yelad · Answer

On the exam - March 28, 2022

[Removed] · Answer

Ali_Pin explained correctly. FIDO2 is the correct answer.

Aquintero · Answer

D. Fichas FIDO2

Nivos23 · Answer

Correct Answer is  D

Jun143 · Answer

just pass the exam today. This came in the question.

PanBrown · Answer

FIDO2 key is the only option in this situation.

janshal · Answer

The call center computers are NOT configured for biometric identification

Answer- C

jasonga · Answer

windows hello for business can also use a PIN instead of biometrics so both it and fido are viable but I think fido is better don't like the question as either could be user

sapien45 · Answer

Users can use passwordless credentials to access resources in tenants where they are a guest, but they may still be required to perform MFA in that resource tenant
Fido2 is a MFAer

Halwagy · Answer

The FiDO2 token

ShoaibPKDXB · Answer

Correct D

dule27 · Answer

D. FIDO2 tokens

EmnCours · Answer

Correct Answer: D

SC-300 Exam - Question 81

Discussion