Question

A security team wants to eliminate passwords entirely for employees signing in to Microsoft Entra ID. They want users to authenticate using something they have (a registered device) combined with a biometric or PIN, with no password stored or transmitted. Which authentication approach should they implement?

Accepted Answer

Passwordless authentication using Windows Hello for Business or the Microsoft Authenticator app

Answer

Single sign-on (SSO) across all cloud applications

Answer

Multi-factor authentication with a password plus an SMS code

Answer

Conditional Access policies that require a compliant device