Multi-factor authentication in Azure - Cheat Sheet & Quick Revision

Recall & Review

beginner

What is Multi-factor Authentication (MFA)?

MFA is a security method that requires users to provide two or more verification factors to access a resource, making it harder for unauthorized people to get in.

beginner

Name three common factors used in MFA.

1. Something you know (like a password)<br>2. Something you have (like a phone or hardware token)<br>3. Something you are (like a fingerprint or face scan)

intermediate

How does Azure MFA improve security for cloud services?

Azure MFA adds an extra step to sign-in by requiring a second form of verification, reducing the risk of stolen passwords being used to access accounts.

intermediate

What are some ways users can verify their identity with Azure MFA?

Users can verify using:<br>- A phone call<br>- A text message with a code<br>- A mobile app notification or code<br>- Hardware tokens

beginner

Why is MFA considered a best practice in cloud security?

Because it adds layers of protection beyond just passwords, making it much harder for attackers to access accounts even if passwords are compromised.

What does MFA stand for in cloud security?

A Managed Firewall Access

B Multiple File Access

C Multi-file Authorization

D Multi-factor Authentication

MFA means Multi-factor Authentication, which adds extra verification steps to secure access.

Which of the following is NOT a factor used in MFA?

A Something you know

B Something you have

C Something you want

D Something you are

MFA factors include knowledge, possession, and inherence, but not 'something you want'.

Which Azure service provides MFA capabilities?

A Azure Active Directory

B Azure Blob Storage

C Azure Virtual Machines

D Azure DevOps

Azure Active Directory includes MFA features to secure user sign-ins.

What is a common method for users to receive their second factor in Azure MFA?

A Phone call or mobile app notification

B Email with a password reset link

C Direct access without verification

D Using a VPN connection

Azure MFA commonly uses phone calls, text messages, or app notifications as second factors.

Why is MFA important even if you have a strong password?

A Because MFA removes the need for usernames

B Because passwords can be stolen or guessed

C Because MFA makes passwords shorter

D Because MFA replaces passwords

MFA protects accounts even if passwords are compromised by requiring additional verification.

Explain how Multi-factor Authentication works and why it is important in cloud security.

Think about how adding steps to sign-in protects accounts.

Describe the ways Azure MFA can verify a user's identity.

Consider the different devices or methods a user might use.