You have a Microsoft Entra tenant. You configure self-service password reset (SSPR) by using the following settings: - Require users to register when signing in: Yes - Number of methods required to…

Question

Options

• Aa mobile app notification
• Ban FIDO2 security token
• Ca Microsoft Teams chat
• Dan email to an address outside your organization

• A
  89% (31)
• B
  3% (1)
• C
  6% (2)
• D
  3% (1)

Explanation

Mobile app notification (Microsoft Authenticator) is a valid SSPR authentication method supported by Microsoft Entra ID, allowing users to approve a password reset request through a push notification in the Authenticator app.

Why the distractors are wrong:

• B (FIDO2 security key): FIDO2 is a passwordless sign-in method, not a supported SSPR authentication method - it cannot be used to reset a password.
• C (Microsoft Teams chat): Teams chat is not an authentication method in any Microsoft Entra security feature; it has no role in SSPR workflows.
• D (external email): SSPR supports email verification, but only to an alternate email address configured within the user's authentication methods - not to arbitrary outside addresses, which would be a security risk.

Memory tip: For SSPR, think of the supported methods using the acronym AMEN: Authenticator app (notification/code), Mobile phone (SMS/call), Email (alternate), Number-based office phone. If a method isn't on this list - like FIDO2 or Teams - it doesn't apply to SSPR, even if it's used elsewhere in Entra ID.

No community discussion yet for this question.