You have a Microsoft 365 E5 subscription. Administrators are issued FIDO2 security keys. You need to create a Conditional Access policy that will use a FIDO2 security key as an authentication…

The correct answer is D. Require authentication strength. To create a Conditional Access policy that requires FIDO2 security keys as an authentication method, you should select the "Grant" access control option and choose "Require authentication…

Submitted by neha2k· Apr 18, 2026Implement and manage Microsoft Entra identity and access

Question

You have a Microsoft 365 E5 subscription. Administrators are issued FIDO2 security keys. You need to create a Conditional Access policy that will use a FIDO2 security key as an authentication method. Which Access controls option should you select for the policy?

Options

ARequire approved client app
BRequire token protection for sign-in sessions
CRequire multifactor authentication
DRequire authentication strength

How the community answered

(40 responses)

A
10% (4)
B
5% (2)
C
3% (1)
D
83% (33)

Explanation

To create a Conditional Access policy that requires FIDO2 security keys as an authentication method, you should select the "Grant" access control option and choose "Require authentication https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-strengths

Topics

#Conditional Access#Authentication Strength#FIDO2 Security Keys#Microsoft Entra ID

Community Discussion

No community discussion yet for this question.

Full MS-102 Practice