SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company uses Microsoft Entra ID (Microsoft Entra ID) and wants to allow users to sign in using biometrics (fingerprint or face) on their mobile devices instead of passwords. They want this to work for both iOS and Android devices. Which Microsoft Entra ID feature should they enable?
⚠ Common exam trap
Test-takers frequently confuse Self-Service Password Reset (SSPR) with passwordless authentication, but SSPR only resets passwords and does not enable biometric sign-in without a password.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Passwordless authentication using Microsoft Authenticator
Microsoft Authenticator supports passwordless authentication using FIDO2-based biometric verification on mobile devices. This feature allows users to sign in with a fingerprint or face on both iOS and Android, eliminating the need for a password while leveraging the device's built-in biometric capabilities.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Passwordless authentication using Microsoft Authenticator
Why this is correct
The Microsoft Authenticator app facilitates passwordless authentication by transforming a user's mobile device into a strong credential. Users can approve sign-in requests via push notifications, verifying their identity with a biometric gesture like a fingerprint or face scan, or a PIN. This method eliminates the need for traditional passwords, significantly enhancing security by making authentication phishing-resistant and improving user experience.
- ✗
Microsoft Entra Connect Sync Health
Why it's wrong here
Microsoft Entra Connect Sync Health is a monitoring service designed to provide insights into the synchronization health of your hybrid identity infrastructure. It reports on the operational status of Microsoft Entra Connect, including synchronization errors and agent connectivity, but it does not function as an authentication method itself. Its primary role is to ensure the reliable flow of identity data between on-premises directories and Microsoft Entra ID, not to enable user sign-in.
- ✗
Microsoft Entra ID Protection
Why it's wrong here
Microsoft Entra ID Protection is a security feature focused on detecting and remediating identity-based risks within an organization. It identifies potential vulnerabilities affecting user identities, such as anomalous sign-in behaviors or leaked credentials, and can trigger automated remediation actions like requiring multi-factor authentication or password resets. While crucial for securing identities, it is a risk detection and policy enforcement engine, not a direct method for users to authenticate or sign in.
- ✗
Self-Service Password Reset (SSPR)
Why it's wrong here
Self-Service Password Reset (SSPR) empowers users to independently reset their forgotten or locked-out passwords without requiring help desk intervention. Users verify their identity through pre-registered authentication methods, such as a mobile phone call, text message, or an alternate email address, to gain access to their account. While SSPR significantly improves account recovery efficiency and reduces support costs, it is a password management tool and does not provide a passwordless sign-in experience using biometrics.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
Key term
Biometrics
Biometrics is the technology that uses unique physical or behavioral traits, like fingerprints or voice patterns, to verify a person's identity.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.