You have a Microsoft 365 tenant. All users have mobile phones and Windows 10 laptops. The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity…

Question

Options

• Aa notification through the Microsoft Authenticator app
• Bsecurity questions
• Cvoice
• DWindows Hello for Business

• A
  12% (3)
• B
  4% (1)
• C
  8% (2)
• D
  76% (19)

Explanation

Windows Hello for Business (D) is correct because it provides MFA using biometrics (fingerprint or facial recognition) or a PIN stored locally on the device - requiring no mobile phone, no Wi-Fi, and no cellular connectivity. Since users have internet access via a wired connection and Windows 10 laptops, Windows Hello for Business functions seamlessly in this scenario.

Why the distractors are wrong:

• A (Microsoft Authenticator app notification): Requires mobile phone connectivity or Wi-Fi to receive push notifications - neither of which is available at the remote location.
• B (Security questions): While they don't require a phone, security questions are only used for self-service password reset (SSPR), not as an MFA authentication method for sign-in.
• C (Voice call): Requires cellular or phone connectivity to receive the automated call - unavailable at this location.

Memory tip: Think of Windows Hello for Business as the "self-contained" MFA method - everything it needs lives on the device itself (biometrics/PIN), making it the go-to answer whenever users lack phone or wireless connectivity. If you see "no Wi-Fi, no mobile signal," Windows Hello for Business is almost always the answer.

No community discussion yet for this question.