(Unit 2 of 8) Azure authentication methods

Question 1

What is authentication?

Answer 1

The process of establishing the identity of a Person, service, or device

Question 2

List some of the multiple authentication methods supported by Azure.

Answer 2

1. Including standard passwords
2. Single sign-on (SSO)
3. Multifactor authentication (MFA)
4. Passwordless.

Question 3

What is SSO (single sign on)?

Answer 3

Single sign-on (SSO) enables a user to sign in one time and use that credential to access multiple resources and applications from different providers.

Question 4

Describe MFA (Multi-Factor Authentication)

Answer 4

Multifactor authentication is the process of prompting a user for an extra form (or factor) of identification **during the sign-in process. **

Question 5

Multifactor authentication provides additional security for your identities by requiring two or more elements to fully authenticate. These elements fall into three categories. Name them.

Answer 5

1. Something the user knows – this might be a challenge question.
2. Something the user has – this might be a code that’s sent to the user’s mobile phone.
3. Something the user is – this is typically some sort of biometric property, such as a fingerprint or face scan.

Question 6

What’s Azure AD Multi-Factor Authentication?

Answer 6

Azure AD Multi-Factor Authentication is a Microsoft service that provides multifactor authentication capabilities.

Question 7

What is Passwordless Authentication?

Answer 7

A means to verify a user’s identity, without using a password.

Question 8

What is a pre-requisite for Passwordless Authentication?

Answer 8

Passwordless authentication needs to be set up on a device before it can work.

Question 9

What is a pre-requisite for Passwordless Authentication?

Answer 9

Passwordless authentication needs to be set up on a device before it can work.

(Laptop, PC + Fingerprint or Pin)

Question 10

Give 3 Passwordless services offered by azure that integrate with AD.

Answer 10

1. Windows Hello for Business
2. Microsoft Authenticator app
3. FIDO2 security keys

Question 11

Explain the passwordless service offered by Azure (1)

Answer 11

Windows Hello

1. ideal for information workers that have their own designated Windows PC
2. Biometric and PIN credentials are directly tied to the user’s PC

Question 12

Explain the passwordless service offered by Azure (2)

Answer 12

Microsoft Authenticator App

1. The Authenticator App turns any iOS or Android phone into a strong, passwordless credential.
2. Biometric or PIN

Question 13

Explain the passwordless service offered by Azure (3)

Answer 13

FIDO2 security keys (Fast IDentity Online)

1.unphishable standards-based passwordless authentication

2. Uses an external security key or a platform key built into a device.
3. FIDO2 security keys are typically USB devices, but could also use Bluetooth or NFC