Security questions cannot be used as a valid authentication method for multi-factor authentication. The Microsoft Authenticator App, FIDO2 Security Key, SMS, and Voice Call are all valid authentication methods for multi-factor authentication. Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods#:~:text=How%20each%20authentication%20method%20works%20%20%20,%20%20M FA%20%204%20more%20rows%20