A company uses Microsoft 365. The company requires that you implement solutions for explicit verification. You need to recommend solutions that meet the requirements. Which three solutions should…

Multifactor authentication enforces explicit verification by requiring users to prove their identity through multiple factors (something you know, have, or are), ensuring that identity claims are strongly validated before granting access.

Just-in-time (JIT) access is a Zero Trust principle aligned with 'use least privilege access' by limiting the duration of elevated permissions, not with the 'verify explicitly' principle that focuses on authentication and identity validation.

Passwordless authentication (e.g., Windows Hello, FIDO2 keys, Microsoft Authenticator) strengthens explicit verification by replacing weak password-based proofs with cryptographically backed credentials that are phishing-resistant and tied to a specific user and device.

Blocking legacy authentication enforces explicit verification by eliminating older protocols (such as SMTP AUTH, IMAP, POP3) that cannot support modern authentication challenges like MFA, which would otherwise create a bypass path around strong identity verification.

Privileged Access Workstations (PAW) are a 'assume breach' and least-privilege hardening control for securing administrative sessions via dedicated devices, not a mechanism for explicitly verifying user identity during authentication.