MS-102 · Question #308
You have a Microsoft 365 E5 subscription. You plan to configure multi-factor authentication (MFA). You need to select an authentication method for users. The solution must ensure that each time a…
The correct answer is B. Microsoft Authenticator. Microsoft Authenticator is the only option that includes application context in its MFA prompt. When push notification MFA is triggered, the Authenticator app displays the name of the application requesting authentication, the geographic location, and the IP address. This…
Question
You have a Microsoft 365 E5 subscription. You plan to configure multi-factor authentication (MFA). You need to select an authentication method for users. The solution must ensure that each time a user is prompted for MFA, the application name that requires MFA is provided. What should you select?
Options
- ASMS
- BMicrosoft Authenticator
- Ca voice call
- Demail OTP
- Ea FIDO2 security key
How the community answered
(44 responses)- A2% (1)
- B77% (34)
- C2% (1)
- D7% (3)
- E11% (5)
Explanation
Microsoft Authenticator is the only option that includes application context in its MFA prompt. When push notification MFA is triggered, the Authenticator app displays the name of the application requesting authentication, the geographic location, and the IP address. This number matching and contextual information helps users verify legitimate sign-ins and resist MFA fatigue attacks. SMS (A), voice call (C), and email OTP (D) only deliver a numeric code with no application context. A FIDO2 security key (E) provides strong phishing resistance but does not surface application names to the user during the tap/press interaction.
Topics
Community Discussion
No community discussion yet for this question.