Exam MS-102 topic 1 question 268 discussion

A. Join all the devices to contoso.com

Correct: D https://www.examtopics.com/discussions/microsoft/view/75062-exam-ms-100-topic-4-question-1-discussion/

While Microsoft Entra join or hybrid join is beneficial for device management, it is not strictly required for passwordless sign-in. The Authenticator app can be used regardless of device join state.

d

Question clearly says "all users use windows 10" - Interestingly there is no Microsoft Authenticator App for Windows - So answer is A

The best recommendation to implement passwordless sign-in for your scenario is: A. Join all the devices to contoso.com Here's why the other options are not ideal: B. Deploy Microsoft Entra Application Proxy: This is not necessary for passwordless sign-in. Application Proxy publishes on-premises applications to Azure Active Directory (Azure AD) but doesn't directly affect passwordless login functionality. C. Deploy X.509.3 certificates to all the users: While certificates can be used for passwordless authentication, it's a more complex solution compared to Azure AD joined devices. D. Deploy the Microsoft Authenticator app: While the Microsoft Authenticator app can be used for multi-factor authentication (MFA) which can be part of a passwordless solution, it requires Azure AD joined devices to leverage Windows Hello for passwordless sign-in. Since your users are already using Windows 10 devices and you want passwordless sign-in, joining the devices to the Azure AD domain (contoso.com) allows them to leverage Windows Hello for passwordless login with features like fingerprint or facial recognition. This is a simpler and more efficient approach for your scenario.

How do you plan to use Authenticator without joining the devices to the domain?