Hotspot Question You have an Azure subscription that is linked to a Microsoft Entra tenant. Self-service password reset (SSPR) is enabled for all users and is configured as shown in the Registration…

Question

Exhibits

Answer Area

• Require users to register when signing in?Yes

Explanation

Assess Azure AD SSPR policies to determine user capabilities based on newly required authentication methods and registration intervals.

Approach. Although the specific user table is omitted from the prompt text, this is a standard exam scenario evaluating a shift to a stricter SSPR policy. 1. User1 (No): The updated policy requires exactly 2 methods, restricted only to Email and Mobile app notification. User1 lacks both approved methods, so they can no longer use SSPR. 2. User2 (Yes): User2 has both approved methods registered, satisfying the new 2-method requirement. 3. User3 (No): The setting 'Require users to register when signing in?' is set to 'Yes'. Users can only dismiss this initial registration prompt for a maximum of 14 days. The 180-day setting shown in the exhibit applies only to re-confirming previously registered information, not skipping initial registration.

Common mistakes.

• common_mistake. A common mistake is confusing the 're-confirm' interval (180 days) with the initial registration skip allowance (14 days). The provided solution image incorrectly selects 'Yes' for User3. Because registration is required at sign-in, a new user cannot skip the initial registration for 180 days.

Concept tested. Microsoft Entra ID (Azure AD) Self-Service Password Reset (SSPR) configuration, authentication methods, and user registration policies.

Reference. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-howitworks

No community discussion yet for this question.