Exam SC-300 topic 2 question 2 discussion

Actual exam question from Microsoft's SC-300

Question #: 2
Topic #: 2

Your company has a Microsoft 365 tenant.
The company has a call center that contains 300 users. In the call center, the users share desktop computers and might use a different computer every day. The call center computers are NOT configured for biometric identification.
The users are prohibited from having a mobile phone in the call center.
You need to require multi-factor authentication (MFA) for the call center users when they access Microsoft 365 services.
What should you include in the solution?

A. a named network location
B. the Microsoft Authenticator app
C. Windows Hello for Business authentication
D. FIDO2 tokens

Show Suggested Answer

Suggested Answer: D 🗳️

by Beitran at May 3, 2021, 12:21 a.m.

Comments

Submit Cancel

Ed2learn

Highly Voted 4 years ago

ignoring the terrible working conditions, terribly configured network (or you would just set MFA and CA to ignore that network segment), and obviously micromanaging bosses - the given answer is correct.

upvoted 37 times

omnomsnom

12 months ago

It's actually quite common for mobiles to not be allowed in some call centres that handle sensitive data or process card holder data. Exempting the network from MFA goes against zero-trust model. FIDO keys are the best solution.

upvoted 1 times

...

3 years ago

A. a named network location - not an MFA option B. the Microsoft Authenticator app - no mobile phones allowed C. Windows Hello for Business authentication - no biometrical options in the office and the data is stored in the local device - they switch PCs every day so D. FIDO2 key

upvoted 16 times

...

sapien45

3 years ago

Users can use passwordless credentials to access resources in tenants where they are a guest, but they may still be required to perform MFA in that resource tenant Fido2 is a MFAer

upvoted 1 times

...

jasonga

3 years, 1 month ago

windows hello for business can also use a PIN instead of biometrics so both it and fido are viable but I think fido is better don't like the question as either could be user

upvoted 1 times

ZauberSRS

2 years, 7 months ago

No, Windows Hello Pin is store locally, they may change computer every day it says

upvoted 2 times

...

bleedinging

3 years, 1 month ago

D. This one is clever. Windows hello for Business would require each user to scan their faces for each computer. It wouldn't be a viable solution. it'd have to be Fido2 instead.

upvoted 3 times

...