Microsoft Security, Compliance, and Identity Fundamentals SC-900 Practice Question

FIDO2 security keys provide a standards-based, hardware-backed credential that is resistant to phishing. Because the private key stays on the physical key, users can authenticate on any supported device or browser without needing a phone. Microsoft Authenticator push notifications and SMS sign-in both rely on a mobile device and still involve a shared secret (a password or verification code). OATH TOTP hardware tokens offer one-time codes but are not considered passwordless because users still enter a code generated from the token.