You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1. You need to ensure that the members of Group1 sign in by using passwordless authentication. What should you do?

The correct answer is A. Configure the Microsoft Authenticator authentication method policy. Authentication methods policy To check settings in the Authentication methods policy, sign in as an Authentication Policy Administrator and go to Azure Active Directory > Security > Authentication methods > Policies. A new tenant has all methods Off by default, which makes…

Submitted by luis.pe· Mar 6, 2026Secure identity and access

Question

You have an Azure Active Directory (Azure AD) tenant that contains a group named Group1. You need to ensure that the members of Group1 sign in by using passwordless authentication. What should you do?

Options

AConfigure the Microsoft Authenticator authentication method policy.
BConfigure the certificate-based authentication (CBA) policy.
CConfigure the sign-in risk policy.
DCreate a Conditional Access policy.

How the community answered

(46 responses)

A
96% (44)
B
2% (1)
D
2% (1)

Explanation

Authentication methods policy To check settings in the Authentication methods policy, sign in as an Authentication Policy Administrator and go to Azure Active Directory > Security > Authentication methods > Policies. A new tenant has all methods Off by default, which makes migration easier because legacy policy settings don't need to be merged with existing settings. https://learn.microsoft.com/en-us/azure/active-directory/authentication/howto-authentication- passwordless-phone

Community Discussion

No community discussion yet for this question.

Full AZ-500 Practice