How to Secure Remote Logins While Minimizing Hardware Costs?
Short answer
A Trusted devices
Question
Key Takeaways
Examines the trade-offs between authentication strength and operational convenience, with test-takers often falling for high-security but cumbersome methods like smart cards instead of recognizing device trust as a modern, scalable alternative.
This question evaluates authentication strategies that balance security with usability for distributed workforces. The community unanimously identifies trusted device authentication as the optimal solution, as it enables secure global access without requiring additional physical tokens or complex workflows.
Common mistake: Smart cards (Option C) are frequently selected due to their strong physical authentication properties, but they directly contradict the requirement to limit equipment and maintain a seamless login experience.
Expert Analysis
Why the Answer Is Correct
Trusted device authentication ties user identity to recognized hardware through cryptographic certificates, mobile device management enrollment, or conditional access policies. This approach inherently supports global remote work since device validation occurs securely over the network regardless of physical location. Once pre-approved, subsequent logins bypass repetitive multi-factor prompts, delivering the seamless experience requested while completely eliminating the need for extra hardware like tokens or card readers.
Why the Other Options Are Wrong
Geotagging enforces strict location-based restrictions, which directly conflicts with the requirement to allow flexible worldwide access. Smart cards demand physical tokens and specialized card readers, violating both the constraint to limit equipment and the goal of maintaining a frictionless login workflow. Time-based logins only control when access is permitted and do nothing to prevent unauthorized account takeovers or streamline the authentication process.
Community Comment Notes
Candidates overwhelmingly agree that trusted devices satisfy all three operational constraints simultaneously [1][2]. Multiple users specifically highlight how registering a known device removes the need for additional hardware investments while preserving remote accessibility [3]. The unanimous voting distribution reflects strong alignment with modern IAM principles that prioritize user experience alongside security.
Official Reference
- https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-63b.pdf
- https://learn.microsoft.com/en-us/azure/active-directory/devices/device-management-overview
- https://www.comptia.org/certifications/security
These links open the official vendor documentation in a new tab.
Exam Strategy
Always map each scenario constraint directly to the technical capabilities of the options before selecting an answer. When questions emphasize seamless access, global reach, and minimal hardware, prioritize software-based conditional access or device trust models over physical tokens or restrictive environmental controls.
Community Votes
100% of anonymous learners picked answer A. Votes are pick records left by other test-takers — they are not the verified answer.
Discussion 3 contributions
Compiled from public community threads and reader submissions, lightly edited for clarity. Handles and vote tallies are shown as recorded, and comments reflect the views of individual contributors.
From public community threads 3
-
a4e15bd 👍 9A Trusted devices allow users to log in seamlessly from devices that are already recognized and trusted by the system. It supports remove and global access as the device does not need to be in a specific location or equipped with extra hardware. It minimizes the need for additional equipment and provides for a streamlined login experience.
-
Glacier88 👍 2 Answered ATrusted devices. Remote work: Trusted devices allow employees to work from any location, including remotely or from assigned offices. Seamless login: Once a device is trusted, users can log in without requiring additional authentication factors, providing a seamless experience. Limited equipment: Trusted devices typically require minimal additional equipment, such as a mobile app or a hardware token. Other options don't meet all the conditions: Geotagging: While it can provide location-based restrictions, it might not be practical for a company with employees working from various locations worldwide. Smart cards: These require physical cards and readers, which might be inconvenient for remote workers and could increase the amount of equipment required. Time-based logins: While they can add a layer of security, they might not be ideal for a company with employees working in different time zones. Trusted devices offer a balance between security and convenience, making them the most suitable solution for the company's requirements.
-
jafyyy 👍 1A. Trusted Devices - allows users to log in from various location using their own trusted devices without requiring additional hardware.
Reader comments & corrections
No reader corrections yet — spotted an error or have a note? Share it below.
Related Analysis
Practice All SY0-701 Questions
Access 100 questions with complete answers and detailed explanations.
View Full SY0-701 Practice Test →