An organization wants phishing-resistant sign-in using supported FIDO2 security keys rather than shared passwords. Which authentication approach is most relevant?

1. Emailing one shared password to every employee
2. A quarterly entitlement review only
3. Passwordless authentication with supported passkeys or security keys
4. Disabling authentication for internal users