Examkin

Question

Difficulty: MediumSelf-Service Password Reset and External Identities

An administrator is configuring Microsoft Entra ID to meet security, governance, and hybrid connectivity requirements. Match each administrative requirement to its minimum required license tier or configuration setting.

  • Configure password writeback from Microsoft Entra ID to on-premises Active Directory Domain Services (AD DS).A Microsoft Entra ID P1 or P2 license tier
  • Restrict guest user invitations to only users assigned to specific administrative roles.Guest invite settings in External collaboration settings
  • Enable guest user self-service sign-up for a registered enterprise application.An External Identities user flow associated with the application

Answer

The requirement to configure password writeback from Microsoft Entra ID to on-premises AD DS matches with the Microsoft Entra ID P1 or P2 license tier. The requirement to restrict guest user invitations to only users assigned to specific administrative roles matches with Guest invite settings in External collaboration settings. The requirement to enable guest user self-service sign-up for an enterprise application matches with an External Identities user flow associated with the application.
The correct mapping pairs password writeback with the Microsoft Entra ID P1/P2 license, limits guest invitation scoping using the External collaboration settings, and assigns self-service sign-up to External Identities user flows linked to the application.

Step-by-Step Solution

1
Analyze the licensing requirement for password writeback.
Password writeback is an SSPR feature that synchronizes cloud password changes back to on-premises Active Directory.
This functionality requires a paid premium license, specifically Microsoft Entra ID P1 or P2.
2
Determine how to control who can invite guest users.
Locate the invitation restriction setting, which limits invitations to administrative roles such as Guest Inviter.
This is configured in the tenant's External collaboration settings under Guest invite settings.
3
Evaluate the mechanism for self-service sign-up of external users.
Identify that a user flow must be created to define the authentication methods and attributes collected during sign-up.
The user flow must then be linked directly to the application in the External Identities settings.

Key Concept

Microsoft Entra ID Self-Service Password Reset (SSPR) licensing requirements and External Collaboration configuration settings.
Estimated Time:1m 30s
Rate this question

Topics

Self-Service Password Reset and External Identities

More questions from this topic