AZ-104 Certification Practice Question #271

Question

You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

You enable password reset for contoso.onmicrosoft.com as shown in the Password Reset exhibit. (Click the Password Reset tab.)

You configure the authentication methods for password reset as shown in the Authentication Methods exhibit. (Click the Authentication Methods tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Accepted Answer

1. **Statement 1 (No):** The password reset configuration requires **2** authentication methods for SSPR to complete (e.g., both Mobile Phone and Security Questions). Therefore, User2 cannot reset their password by using only one method (Security Questions).
2. **Statement 2 (No):** In the Password Reset configuration exhibit, SSPR is enabled for a specific group (`Group2`). User1 is a member of `Group1` (not `Group2`), which means self-service password reset is not enabled for User1.
3. **Statement 3 (No):** Configuring SSPR policies and authentication methods (such as adding or modifying security questions) is a privileged action that requires a **Global Administrator** or **Authentication Policy Administrator** role. User3 holds the **User Administrator** role, which does not grant permissions to manage MFA or directory-wide SSPR configurations.

More AZ-104 practice questions