nerdexam
Microsoft

MS-900 · Question #407

A company uses Microsoft 365 services. The company is evaluating multi-factor authentication (MFA) methods. You need to determine which MFA methods are supported in Microsoft 365. Which three methods

The correct answer is A. verification code sent in a phone call C. verification code sent in a text message D. Microsoft Authenticator smart phone app. Microsoft 365 supports several MFA verification methods including phone calls, SMS text messages, and authenticator apps. Understanding which methods are natively supported helps administrators plan their authentication strategy.

Submitted by marco_it· Mar 5, 2026Describe security, compliance, privacy, and trust in Microsoft 365

Question

A company uses Microsoft 365 services. The company is evaluating multi-factor authentication (MFA) methods. You need to determine which MFA methods are supported in Microsoft 365. Which three methods are supported? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • Averification code sent in a phone call
  • Bcustom security question
  • Cverification code sent in a text message
  • DMicrosoft Authenticator smart phone app
  • Ebiometric retinal scanner

How the community answered

(70 responses)
  • A
    80% (56)
  • B
    13% (9)
  • E
    7% (5)

Why each option

Microsoft 365 supports several MFA verification methods including phone calls, SMS text messages, and authenticator apps. Understanding which methods are natively supported helps administrators plan their authentication strategy.

Averification code sent in a phone callCorrect

Microsoft 365 MFA supports voice call verification, where the user receives an automated phone call and presses a key (typically #) to approve the sign-in, making it a fully supported second factor.

Bcustom security question

Custom security questions are not a supported MFA method in Microsoft 365 MFA; security questions may appear in Azure AD Self-Service Password Reset (SSPR) but are not used as an MFA factor.

Cverification code sent in a text messageCorrect

SMS text message verification is a supported MFA method in Microsoft 365, where a one-time passcode is sent to the user's registered mobile number and must be entered to complete authentication.

DMicrosoft Authenticator smart phone appCorrect

The Microsoft Authenticator app is a fully supported and Microsoft-recommended MFA method for Microsoft 365, supporting push notifications, time-based one-time passwords (TOTP), and passwordless sign-in.

Ebiometric retinal scanner

Biometric retinal scanners are not a natively supported MFA method in Microsoft 365; while Windows Hello supports biometrics like fingerprint and facial recognition, retinal scanning is not a supported option.

Concept tested: Supported MFA authentication methods in Microsoft 365

Source: https://learn.microsoft.com/en-us/entra/identity/authentication/concept-mfa-howitworks

Topics

#multifactor authentication#MFA methods#Microsoft Authenticator#verification codes

Community Discussion

No community discussion yet for this question.

Sign up to join the discussion
Full MS-900 Practice