Your organization wants to reduce reliance on passwords and adopt a phishing-resistant authentication method for employees signing in to Microsoft 365. Users should be able to sign in using a PIN or biometric gesture tied to their specific device, with no password transmitted. Which Microsoft Entra authentication method should you deploy?