You have an Azure Active Directory (Azure AD) tenant. You configure self-service password reset (SSPR) by using the following settings: - Require users to register when signing in: Yes - Number of…

The correct answer is A. an email to an address outside your organization. When using a mobile app as a method for password reset, like the Microsoft Authenticator app, the following considerations apply: - When administrators require one method be used to reset a password, verification code is the only option available. - When administrators require…

Submitted by packet_pusher· Mar 6, 2026Implement authentication and access management

Question

You have an Azure Active Directory (Azure AD) tenant. You configure self-service password reset (SSPR) by using the following settings:

Require users to register when signing in: Yes
Number of methods required to reset: 1

What is a valid authentication method available to users?

Options

Aan email to an address outside your organization
Ba mobile app notification
Can FIDO2 security token
Dan email to an address in your organization

How the community answered

(17 responses)

A
71% (12)
B
6% (1)
C
18% (3)
D
6% (1)

Explanation

When using a mobile app as a method for password reset, like the Microsoft Authenticator app, the following considerations apply: - When administrators require one method be used to reset a password, verification code is the only option available. - When administrators require two methods be used to reset a password, users are able to use notification OR verification code in addition to any other enabled methods. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr- howitworks#mobile-app-and-sspr

Topics

#SSPR#authentication methods#external email verification#self-service password reset

Community Discussion

No community discussion yet for this question.

Full SC-300 Practice