SC-300 Certification Practice Question #108

Question

You have an Azure Active Directory (Azure AD) tenant.

You configure self-service password reset (SSPR) by using the following settings:

•	Require users to register when signing in: Yes
•	Number of methods required to reset: 1

What is a valid authentication method available to users?

Accepted Answer

MS Learn is explicit: with "Number of methods required to reset = 1," the only mobile-app feature available is the verification **Code**, while push **Notification** (option C) is disallowed. Option B "a mobile app code" maps exactly to that verification code and is therefore a valid method, matching both the Suggested Answer and the Most Voted (8). The dissent for D ("email outside your organization") is reasonable — email is also a valid SSPR method — but it's only the better answer if the option set excluded a valid mobile-app choice; here B is a valid choice, so D is not required. Confidence is held at 80% because the community is genuinely split (the strong "D" camp exists, and the distinction between mobile-app "code" vs "notification" is the crux that some commenters conflate), but MS Learn breaks the tie cleanly in favor of B.

More SC-300 practice questions