nerdexam
Microsoft

MS-900 · Question #166

A company uses Microsoft 365. Users who are based on-premises must be able to reset their own passwords. The company plans to purchase Azure Active Directory (AD) licenses. You need to identify the…

The correct answer is A. Azure AD Premium P2 D. Azure AD Premium P1. Self-Service Password Reset (SSPR) for on-premises users requires password writeback, which is only available in Azure AD Premium P1 and P2 licenses.

Submitted by carter_n· Mar 5, 2026Describe Microsoft 365 pricing, licensing, and support

Question

A company uses Microsoft 365. Users who are based on-premises must be able to reset their own passwords. The company plans to purchase Azure Active Directory (AD) licenses. You need to identify the Azure AD licenses that meet this requirement. Which two Azure AD licenses should you choose? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point.

Options

  • AAzure AD Premium P2
  • BAzure AD Free
  • COffice 365 apps
  • DAzure AD Premium P1

How the community answered

(46 responses)
  • A
    96% (44)
  • B
    2% (1)
  • C
    2% (1)

Why each option

Self-Service Password Reset (SSPR) for on-premises users requires password writeback, which is only available in Azure AD Premium P1 and P2 licenses.

AAzure AD Premium P2Correct

Azure AD Premium P2 includes all P1 features plus advanced identity protection, and it fully supports SSPR with password writeback to on-premises Active Directory, satisfying the requirement for on-premises users to reset their own passwords.

BAzure AD Free

Azure AD Free supports SSPR only for cloud-only accounts and does not include the password writeback feature required to reset passwords for on-premises Active Directory users.

COffice 365 apps

Office 365 apps license includes a limited version of SSPR but does not support password writeback to on-premises Active Directory, making it insufficient for users whose identities are managed on-premises.

DAzure AD Premium P1Correct

Azure AD Premium P1 includes Self-Service Password Reset with password writeback capability, which synchronizes password changes back to the on-premises Active Directory environment, making it the minimum license tier that meets this specific requirement.

Concept tested: Azure AD SSPR licensing with on-premises password writeback

Source: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-licensing

Topics

#Azure AD licensing#Self-Service Password Reset (SSPR)#Azure AD Premium P1#Azure AD Premium P2

Community Discussion

No community discussion yet for this question.

Full MS-900 Practice