AZ-900 Practice Question 80: Passwordless Windows Hello
Microsoft Azure Fundamentals (AZ-900) · Test 8 · question 10 of 10
A security architect wants to remove passwords from the sign-in flow entirely for a group of users, rather than simply adding a second factor alongside the password they already type. Which of these methods actually eliminates the password?
Show answer and explanation
Answer:
Windows Hello for Business replaces the password with strong authentication tied to a specific device, unlocked with a biometric or a PIN. It's one of Microsoft Entra ID's passwordless authentication methods, alongside passwordless sign-in with Microsoft Authenticator and FIDO2 security keys; the password is never part of the sign-in at all.
Option A still starts with a password; adding an Authenticator approval on top of it is traditional multifactor authentication, not passwordless; the password hasn't gone anywhere. Option C is the same pattern with a different second channel: the password is typed first, and the SMS code only supplements it. Option D simply stacks a second thing the user knows on top of the password, which doesn't remove it either. All three keep the password as a required step; only Windows Hello for Business takes it out of the flow.
Reference: Passwordless authentication with Microsoft Entra ID