Examkin

Soru

Zorluk: OrtaSelf-Service Password Reset and External Identities

You are the administrator for a Microsoft Entra ID tenant. You configure a Self-Service Password Reset (SSPR) policy that requires users to use at least two methods to reset their password. You enable the following authentication methods for SSPR:
- Email
- Mobile app notification
- Mobile app code

A user named User1 is in the group scoped for SSPR. User1 installs the Microsoft Authenticator app on their smartphone and registers it for both notifications and verification codes. User1 does not register any other authentication methods.

When User1 attempts to reset their password, they receive an error indicating they have not registered the required number of authentication methods.

What is the cause of this issue?

  1. The Microsoft Authenticator app notification and verification code are considered a single authentication method category, so User1 has only registered one method.Cevap
  2. B
    The SSPR policy requires the user to be assigned a Microsoft Entra ID P2 license to use mobile app notifications and verification codes as two separate methods.
  3. C
    User1 must be assigned a Directory Readers or Guest Inviter administrative role to use the Microsoft Authenticator app for SSPR.
  4. D
    User1's account must be placed within an Administrative Unit that has SSPR policies explicitly delegated to local administrators.

Cevap

The Microsoft Authenticator app notification and verification code are considered a single authentication method category, so User1 has only registered one method.
The correct answer is that the Microsoft Authenticator app notifications and verification codes are both part of the mobile app authentication method category. When a Self-Service Password Reset (SSPR) policy requires two methods, the user must register two distinct categories of methods (such as Email and Mobile App). Registering two different options within the same category (e.g., both notification and verification code via the Authenticator app) only counts as one registered method.

Adım Adım Çözüm

1
Analyze the SSPR policy requirements.
The SSPR policy requires a minimum of two authentication methods to be registered and used by the user.
This establishes the rule that a single registered method category will not be sufficient for User1 to reset their password.
2
Examine the authentication methods registered by User1.
User1 has registered the Microsoft Authenticator app, configuring both push notifications and verification codes.
To determine how many distinct method categories User1 has registered under Microsoft Entra ID SSPR rules.
3
Evaluate the registered methods against SSPR categorization.
In Microsoft Entra ID, both notifications and verification codes from the Authenticator app fall under the single 'Mobile app' authentication method category. Therefore, User1 is treated as having only one registered authentication method.
This explains why User1 fails the SSPR requirement and identifies that they must register an additional distinct method (like Email or Mobile phone) to meet the policy requirement.

Anahtar Kavram

Microsoft Entra ID SSPR authentication method categorization and registration requirements.
Tahmini Süre:1m 30s
Bu soruyu puanla

Konular

Self-Service Password Reset and External Identities

Bu konudan daha fazla soru