SC-300 Certification Practice Question #98

Question

You have an Azure Active Directory (Azure AD) tenant that uses Azure AD Identity Protection and contains the resources shown in the following table.

Azure Multi-factor Authentication (MFA) is enabled for all users.
User1 triggers a medium severity alert that requires additional investigation.
You need to force User1 to reset his password the next time he signs in. The solution must minimize administrative effort.
What should you do?

Accepted Answer

The tenant already has the Risk1 user-risk policy that forces a password reset on next sign-in for High-severity risk users. User1's alert is medium severity, so it won't trigger that policy on its own. The lowest-effort way to force User1 (and only User1) to reset their password is to "Confirm user compromised" in Identity Protection, which immediately elevates the user's risk to High; the existing Risk1 policy then auto-remediates by forcing a secure password reset at next sign-in. MS Learn's risk-feedback documentation describes exactly this behaviour. Option A would change policy scope for everyone (more effort and wider blast radius), C doesn't reset a password, and D addresses sign-in risk rather than the user-risk remediation already in place. Suggested Answer, the unanimous community vote (B, 20), and MS Learn all agree; a lone A dissent keeps this at 88 rather than higher.

More SC-300 practice questions