Examkin

Soru

Zorluk: OrtaSelf-Service Password Reset and External Identities

Your company has a Microsoft Entra ID tenant that contains both cloud-only users and hybrid users synced from an on-premises Active Directory Domain Services (AD DS) domain. The tenant contains a mix of Microsoft Entra ID Free and Microsoft Entra ID P1 licenses.

You need to configure Self-Service Password Reset (SSPR) to meet the following requirements:
1. All hybrid users must be able to reset their passwords, and the changes must synchronize back to the on-premises AD DS.
2. Standard cloud-only users must be subject to a two-gate SSPR policy that requires two authentication methods to reset their passwords.

Which of the following statements describe the licensing and configuration requirements to support this SSPR setup? Select two.

  1. Each hybrid user who resets their password using SSPR must be assigned a Microsoft Entra ID P1 or higher license to support password writeback.Cevap
  2. Standard cloud-only users must be assigned a Microsoft Entra ID P1 or higher license to use a two-gate SSPR policy.Cevap
  3. C
    Standard cloud-only users can use the two-gate SSPR policy under the Microsoft Entra ID Free tier, provided the selected authentication methods are limited to email and mobile app notification.
  4. D
    You can create separate SSPR policies with different authentication method counts for hybrid users and cloud-only users by targeting different Administrative Units.

Cevap

Each hybrid user utilizing SSPR with writeback must have a Microsoft Entra ID P1 or higher license, and standard cloud-only users must also have a Microsoft Entra ID P1 or higher license to be subject to a two-gate SSPR policy.
The correct options state that hybrid users utilizing password writeback need a Microsoft Entra ID P1 (or higher) license, and standard cloud-only users need a Microsoft Entra ID P1 (or higher) license to use a two-gate SSPR policy. Password writeback is a premium hybrid identity feature requiring P1/P2. Additionally, standard users are limited to a single-gate SSPR policy on the Free tier, meaning that a two-gate policy requires premium licenses.

Adım Adım Çözüm

1
Determine the licensing requirement for password writeback.
Password writeback synchronizes cloud password changes back to an on-premises AD DS environment. This capability requires a Microsoft Entra ID P1 or P2 license.
On-premises synchronization features are not included in the Free tier.
2
Evaluate SSPR gate constraints for Free vs. P1 licenses.
The Microsoft Entra ID Free license only supports a single-gate SSPR policy (1 method required) for standard cloud-only users. Enforcing a two-gate policy (2 methods required) requires Microsoft Entra ID P1 or P2.
Advanced policy configurations, such as multiple gates, are restricted to premium licensing tiers.
3
Verify if multiple SSPR policies can be scoped within a single tenant.
SSPR configuration is a single tenant-wide settings policy. Although the policy enablement can be scoped to 'All', 'None', or a single 'Selected' group, the authentication methods and gate count parameters apply globally to all enabled users.
SSPR does not support multiple configurations or scoping settings (like gate count) via Administrative Units or different group-based policies.

Anahtar Kavram

Microsoft Entra ID SSPR licensing capabilities and global policy structure
Bu soruyu puanla

Konular

Self-Service Password Reset and External Identities

Bu konudan daha fazla soru