Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

Requiring users to verify their identity with both a password (something they know) and a mobile app notification (something they have) is an example of multi-factor authentication. Multi-factor authentication strengthens security by combining at least two different categories of credentials. Single sign-on focuses on providing seamless access across applications but does not add an extra verification factor. Password hash synchronization copies password hashes to Azure AD but still relies on single-factor (password) authentication. Role-based access control determines what an authenticated user can do (authorization) rather than how the user proves their identity.