MS-102 Microsoft Authenticator app (phone sign-in) Practice Question
Your organization uses Microsoft 365 and wants to implement a passwordless authentication strategy. Which THREE methods are supported natively in Microsoft Entra ID for passwordless sign-in?
⚠ Common exam trap
A common trap is thinking that Temporary Access Pass is not a native passwordless method because it is often used for recovery, but it is indeed a supported native method in Entra ID. Candidates may also overlook it because it is limited in duration, but it is still considered passwordless.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Authenticator app (phone sign-in)
Microsoft Entra ID natively supports three passwordless authentication methods: Windows Hello, FIDO2 security keys, and the Microsoft Authenticator app (phone sign-in), so option B is correct because Authenticator phone sign-in lets users sign in by approving a notification with a biometric or PIN instead of a password. Option C is correct because Temporary Access Pass is a native passwordless method that issues a time-limited passcode used to register other passwordless methods or recover access. Option E is correct because FIDO2 security keys are native passwordless credentials that use WebAuthn for phishing-resistant sign-in. Options A and D are not correct because smart cards and certificate-based authentication, while supported for authentication in Entra ID, are not classified as native passwordless sign-in methods in the passwordless authentication strategy.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Smart cards (physical or virtual)
Why it's wrong here
Smart cards require a certificate and PIN, functioning as phishing-resistant multi-factor authentication rather than native passwordless sign-in. Microsoft Entra ID supports Windows Hello for Business, FIDO2 security keys and the Microsoft Authenticator app for passwordless. Smart cards are used where certificate-based MFA is mandated.
- ✓
Microsoft Authenticator app (phone sign-in)
Why this is correct
Microsoft Entra ID supports phone sign-in through the Microsoft Authenticator app as a native passwordless method, binding credentials to the device. Users approve a number match rather than entering a password, satisfying the passwordless sign-in requirement.
- ✓
Temporary Access Pass
Why this is correct
Temporary Access Pass issues a time-limited, one-time passcode that lets a user register passwordless credentials such as FIDO2 keys or Microsoft Authenticator, and can itself serve as a passwordless sign-in method natively supported in Microsoft Entra ID.
- ✗
Certificate-based authentication
Why it's wrong here
Certificate-based authentication typically requires hybrid or on-premises certificate authorities and is not a native cloud-only passwordless method.
- ✓
FIDO2 security keys
Why this is correct
FIDO2 security keys are a native Microsoft Entra ID passwordless method, using phishing-resistant public-key credentials bound to the sign-in origin. They satisfy the passwordless strategy alongside Windows Hello for Business and the Microsoft Authenticator app.
Go deeper
Related to this question
Learn chapter
Windows Autopilot Deployment
Key term
Microsoft 365
Microsoft 365 is a subscription-based cloud service from Microsoft that combines productivity tools like Office apps with security, device management, and online storage.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.