Exam SY0-601 topic 1 question 467 discussion

Please don't copy paste chatgpt answers here, you can get chatgpt to name all answers as correct with some dumb reasoning about them. You cannot answer the phone call if you dont have the phone. it's 100% something you have, forget the code you might get from the call, this is not stated in the questions. A. Push notificating --> something you have B. Password --> something you know C. Sms ---> It's the same as phone call. You need a phone to "know" the sms text--> some you have D. auth app --> something you have. Don't add text to the question that isn't there, don't overthink too much.

phone call -> something you have push notif -> something you have SMS mess -> something you have auth app -> something you have password -> something you know Well...

This question is disrespectful, I'm not understanding why it is password even after reading you all's explanations.

MFA (multifactor authentication) is achieved using 2 or more verification factors. The 3 main verification factors are: (1) Things you know (knowledge), such as a password or PIN (2) Things you have (possession), such as a badge or smartphone (3) Things you are (inherence), such as a biometric like fingerprints or voice recognition Options A, C, and D belong to the "something you have" category. A phone call would also be listed under the possession category. A password is something you know and it goes under the knowledge category. Option A is the only option that belongs to a different category from the possession category.

Has no one used MFA? You log into an application with your password, once verified they ask you to open your authentication app that is connected to the application you are using and there is a TOTP that you have to input for the application to fully authenticate you and let you through to the app. PASSWORDS ARE THE FIRST THING YOU DO. MFA is using another process to continue authentication AFTER you have punched in your password.

Usually in a corporate security setting, MFA is used in a combination of 'something you have' and 'something you know'. Therefore, in context of this poorly worded question the best educated guess would be a combination of voice call (giving you an OTP) which is something you have and password which is something you know.

MFA is a multi-step account sign-in process that requires users to enter more information in addition to their password. For example, in addition to entering a password, users may also be asked to enter a verification code sent to their email, answer a secret question, or scan their fingerprint. This second form of verification can help prevent unauthorized account access if your system password is compromised.

I think the question is about the conditional-access policy guys. "COMPANY email is configured with ((( conditional access ))) and requires MFA " - Conditional Access is a policy-based evaluation engine that allows you to create access rules for any Azure Active Directory (Azure AD) connected application. With the Authentication Application, you can configure: passwords

Please, for yall's sake, stop using Chat GPT. It's a language learning program. The data set it pulls from is the internet. The internet is filled with great stuff that is usually correct, but it is also filled with stuff that is completely wrong. That essay that was published by a highschooler that was just trying to get a grade and mashed together nonsense is a viable set of data for Chat GPT to pull from. Chat GPT actually has no idea if it is right or wrong. All it knows is that this data is related to what you're asking about. It's main task is to imitate human literature. Yes it's AI, and AI sounds like this super smart computer, but its not. It does what it's programmed to do, and that's to imitate human literature, not be an all knowing super computer that's never wrong.

Password is the 1st factor and phone call (possibly to receive OTP codes) is the 2nd Factor. Answer is B.

As the question doesn’t offer specific clues or indications to choose one particular MFA method over the others. In such cases, when the question doesn’t provide explicit context or constraints, it’s essential to consider MFA methods commonly used for securing email access in a corporate environment. In a typical corporate email security setup, organizations often employ a combination of MFA methods to enhance security while considering user convenience. Push notifications and authentication apps are popular choices due to their effectiveness and user-friendliness. Therefore, I have chosen A it could be option D as well in terms of common factor consideration. As all options are considerably correct.

GUYS WAKE UP!! PASSWORD IS NOT A TYPE OF MFA, The question is very wierd all the answers are right except for password.

all the answers are correct. I think the one who wrote this question was drunk.....

The answer is B obviously here if the question is read correctly. The question at the end asks "An example of MFA is a phone CALL and a". MFA is something you have, something you know. Phone call is an option which you get after putting your password. So, password and a phone call is an example of MFA.

I dont know what to put here... they all are examples of MFAs. If I got this question on the test I would go with A. Just because the AI from mouettespaghetti picked it

Confusing indeed but I think the question keywords are "email is configured with conditional access" so besides phone call, another example of MFA is (D) An authentication application

It should be B, password. The wording is horrible on this question. Phone call be fall under something you have(the phone) or something you know(if you get a code after answering). However, is the phone falls under something you know, A B and D are equally valid answers. So, by this logic, the phone call is something you have, pair with B, password as someting you know = MFA.