SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID for identity management. You need to enable users to sign in using a QR code from the Microsoft Authenticator app. Which Microsoft Entra feature should you configure?
⚠ Common exam trap
A common mix-up: candidates confuse the QR code scanning capability of the Authenticator app with FIDO2 security keys, but the question specifically asks about using the Microsoft Authenticator app, not a separate hardware device.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Passwordless sign-in with Microsoft Authenticator
The Microsoft Authenticator app supports passwordless sign-in by allowing users to approve a notification or scan a QR code from the sign-in screen. This feature eliminates the need for a password and relies on the Authenticator app as a primary authentication method, which is configured under the Passwordless sign-in with Microsoft Authenticator option in Entra ID.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
FIDO2 security keys
Why it's wrong here
FIDO2 security keys provide a strong, phishing-resistant, passwordless authentication method by leveraging cryptographic keys stored on a physical device. Users authenticate by inserting the key and typically providing a PIN or biometric gesture directly to the hardware, not by scanning a QR code. This method relies on direct communication between the device and the authentication provider, bypassing visual codes entirely for sign-in.
- ✗
Temporary Access Pass
Why it's wrong here
A Temporary Access Pass (TAP) is a time-limited, single-use passcode issued by an administrator to facilitate passwordless onboarding or recovery for users. It allows users to set up strong authentication methods like Microsoft Authenticator or FIDO2 keys without needing their primary password. While it enables passwordless experiences, TAP itself is a numeric or alphanumeric code entered directly, not a QR code scanned for sign-in.
- ✓
Passwordless sign-in with Microsoft Authenticator
Why this is correct
Passwordless sign-in with Microsoft Authenticator is a core feature that allows users to sign into Microsoft Entra ID-connected applications without entering a password. When a user attempts to sign in, they are presented with an option to scan a QR code displayed on the sign-in screen using the Microsoft Authenticator app on their mobile device. The app then securely approves the sign-in request, often after a number match confirmation, providing a seamless and secure authentication experience.
- ✗
My Security-info (https://aka.ms/mysecurityinfo)
Why it's wrong here
My Security-info, accessible via https://aka.ms/mysecurityinfo, is a self-service portal where users manage their security information and authentication methods registered with Microsoft Entra ID. This includes adding or removing phone numbers, email addresses, Microsoft Authenticator registrations, or FIDO2 keys. While crucial for managing authentication settings, this portal is a configuration interface and does not itself provide a mechanism for signing into other applications using a QR code.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Identity
Identity is the unique set of attributes that defines a user, device, or service in a computer system, determining what they can access and do.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.