You administer a Forefront Identity Management (FIM) 2010 server in your company network. You need to force domain users to reset their QA Gate answers. What should you do?

The 'Require Re-Registration' option on the Password Reset AuthN Workflow is the built-in FIM mechanism that marks all existing QA Gate registrations as invalid, forcing domain users to go through the self-service registration portal again and provide new answers. This directly targets the authentication workflow configuration responsible for QA Gate registration state, ensuring all users must re-register before they can use password reset.

The 'Run On Policy Update' option in Extended Attributes controls whether the workflow re-executes when a related policy is updated, not whether users are forced to re-register their QA Gate answers.

While manually removing AuthN Workflow GUIDs from the User.AuthNWFRegistered attribute could technically clear registration state, this is not the supported administrative method and would require manually modifying individual user objects rather than using the built-in workflow configuration.

The 'System Workflow Required for Registration' workflow handles the registration process flow itself but registering it does not force existing users to reset or re-provide their QA Gate answers.