Microsoft Certified Security Compliance And Identity Fundamentals · Free Practice Question Easy
Question 12
Which of the following is TRUE regarding self-service password reset in Azure AD?
-
A
Users can only reset their passwords if they are on the corporate network
-
B
Only global administrators can perform self-service password reset
-
C
Self-service password reset is not available if password writeback is enabled
-
D
Self-service password reset can be performed through the Microsoft Authenticator app
Reveal correct answer
Correct answer: D
Explanation
Self-service password reset allows users to reset their passwords or unlock their accounts without the need for assistance from IT personnel. In Azure AD, self-service password reset can be performed through web portals, mobile apps, and security questions.
Users can reset their passwords from anywhere, provided they have access to a web browser or mobile app that is connected to the internet.
Self-service password reset can be assigned to users or groups through Azure AD roles. Global administrators are the only ones who can configure and manage self-service password reset policies, but they are not the only ones who can perform self-service password reset.
Self-service password reset can be used with password writeback, a feature that allows password changes made in Azure AD to be written back to an on-premises Active Directory environment.
Users can perform self-service password reset using the Microsoft Authenticator app, which can be configured to send notifications or codes to users to verify their identity during the password reset process.
Reference:
- Microsoft Self-service password reset. Retrieved from https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
Discussion
Think the marked answer is wrong, or have a better explanation? Share it below — comments appear after review.
