Examkin

Question

Difficulty: EasySelf-Service Password Reset and External Identities

You are configuring the Self-Service Password Reset (SSPR) policy for users in a Microsoft Entra ID tenant. You need to select the methods that users can use to reset their passwords. Which two of the following authentication methods can be enabled directly within the Microsoft Entra ID SSPR authentication methods policy?

  1. EmailAnswer
  2. Mobile app notificationAnswer
  3. C
    FIDO2 security key
  4. D
    Azure Resource Manager Owner role assignment

Answer

The correct authentication methods that can be enabled directly in the SSPR policy are Email and Mobile app notification.
Email and Mobile app notification are both standard, natively supported authentication methods that can be selected in the SSPR policy configuration within Microsoft Entra ID.

Step-by-Step Solution

1
Identify the policy settings for Self-Service Password Reset (SSPR) in Microsoft Entra ID.
Access the SSPR configuration blade in the Microsoft Entra admin center under password reset authentication methods.
To see which native methods are configurable for password resets.
2
Evaluate the available options for SSPR methods against the choices.
Confirm that Email and Mobile app notification are supported, whereas FIDO2 keys and RBAC role assignments are not configured within this policy.
To select the correct, directly-supported SSPR authentication factors.

Key Concept

SSPR Authentication Methods configuration in Microsoft Entra ID.
Rate this question

Topics

Self-Service Password Reset and External Identities

More questions from this topic