SC-300 Certification Practice Question #158

Question

You have a Microsoft 365 tenant.

All users have mobile phones and Windows 10 laptops.

The users frequently work from remote locations that do not have Wi-Fi access or mobile phone connectivity. While working from the remote locations, the users connect their laptop to a wired network that has internet access.

You plan to implement multi-factor authentication (MFA).

Which MFA authentication method can the users use from the remote location?

Accepted Answer

The scenario removes every network-dependent factor — no Wi-Fi and no mobile connectivity — leaving only an authenticator that lives entirely on the laptop. Windows Hello for Business uses a TPM-bound private key released by a local PIN or biometric gesture; the PIN/biometric never leaves the device and no real-time network challenge is required, yet MS Learn confirms the WHfB credential satisfies Microsoft Entra MFA. The Authenticator push (C) needs the phone online, the app password (B) is explicitly not MFA, and security questions (D) are an SSPR mechanism, so WHfB is the only viable MFA method from the offline remote location. Suggested Answer, Most Voted, and MS Learn all agree.

More SC-300 practice questions