AZ-900 Practice Question 47: Multifactor Authentication

Microsoft Entra multifactor authentication works by requiring two or more of three *categories*: something you know (typically a password), something you have (a trusted device that isn't easily duplicated, such as a phone or a hardware key), and something you are (biometrics such as a fingerprint or face scan). A password plus an approval in Microsoft Authenticator draws on two different categories, and Microsoft Authenticator is one of the listed verification methods.

Option A stacks two "something you know" factors; a memorized answer is just a second password, so the count goes up while the number of categories does not. Option B is a single factor entered twice, which adds no security at all. Option D is also a single factor: a username is an identifier rather than a secret, and the laptop being company-managed is a device signal that Conditional Access can evaluate, not an authentication factor in its own right.

Reference: Microsoft Entra multifactor authentication overview