Exam MS-102 topic 1 question 296 discussion

Actual exam question from Microsoft's MS-102

Question #: 296
Topic #: 1

You have a Microsoft 365 E5 subscription.

You plan to implement an authentication policy that will user FIDO2 security key as a user authentication method.

You need to ensure that during enrollment, each FIDO2 security key is verified by using the FIDO Alliance Metadata Service.

Which setting should you enable?

A. Allow self-service setup
B. Restrict specific keys
C. Enforce attestation
D. Enforce key restrictions

Show Suggested Answer

Suggested Answer: C 🗳️

by GetEsn at Oct. 16, 2024, 12:01 p.m.

Comments

Submit Cancel

justITtopics

5 months ago

Selected Answer: C

https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-enable-passkey-fido2 Set Enforce attestation to Yes if your organization wants to be assured that a FIDO2 security key model or passkey provider is genuine and comes from the legitimate vendor: For FIDO2 security keys, we require security key metadata to be published and verified with the FIDO Alliance Metadata Service, and also pass Microsoft's another set of validation testing.

upvoted 3 times

...

GetEsn

6 months, 2 weeks ago

Selected Answer: C

Correct https://learn.microsoft.com/en-us/entra/identity/authentication/how-to-enable-passkey-fido2

upvoted 3 times

...

Exam MS-102 All Questions

View all questions & answers for the MS-102 exam

Exam MS-102 topic 1 question 296 discussion

Comments

justITtopics

GetEsn

SY0-701