SC-300 Certification Practice Question #99

Question

You have an Azure Active Directory (Azure AD) tenant.
You configure self-service password reset (SSPR) by using the following settings:
✑ Require users to register when signing in: Yes
✑ Number of methods required to reset: 1
What is a valid authentication method available to users?

Accepted Answer

Self-service password reset supports a fixed set of authentication methods: Microsoft Authenticator push/code, OATH tokens, SMS, voice call, security questions, and email (Email OTP). Email is a valid SSPR method, and the SSPR email field can be any address — internal or external to the organization — so "an email to an address outside your organization" qualifies. Smartcards and FIDO2 security tokens are sign-in/MFA methods that are not selectable for SSPR, and Teams chat is not an SSPR option at all. The Suggested Answer, the community vote (A, 14), the top comment enumerating SSPR methods, and MS Learn all agree, with no meaningful dissent — hence 93%.

More SC-300 practice questions