Question

Contoso wants to strengthen Windows Hello for Business sign-in on shared workstations in a secure lab. Users currently unlock with a PIN alone. Security requires that a second factor — either a registered fingerprint or a Bluetooth phone that is in proximity — be combined with the PIN before the device unlocks. Which Windows Hello for Business feature should you configure in Intune to enforce this?

Accepted Answer

Multifactor unlock, configuring first and second unlock factor credential providers

Answer

Windows Hello PIN complexity settings requiring uppercase, digits, and special characters

Answer

Dynamic lock, which locks the device when a paired Bluetooth phone moves out of range

Answer

Conditional Access requiring multifactor authentication for the sign-in risk policy