Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Requiring both something the user knows (their password) and something the user has (a temporary code delivered to a trusted device) is an example of multifactor authentication. Single sign-on is about using one set of credentials to access multiple apps, not adding factors. Role-based access control is an authorization mechanism that assigns permissions based on job roles, not an authentication method. Conditional Access evaluates sign-in conditions to allow or block access but does not, by itself, define how many factors are required; it can enforce multifactor authentication, but MFA is the specific concept shown in the scenario.