Exam AZ-300 topic 1 question 21 discussion

Microsoft highly recommends Administrators enable users to select more than the minimum required number of authentication methods in case they do not have access to one. Authentication Method Usage Password MFA and SSPR Security questions SSPR Only Email address SSPR Only Microsoft Authenticator app MFA and SSPR OATH Hardware token Public preview for MFA and SSPR SMS MFA and SSPR Voice call MFA and SSPR App passwords MFA only in certain cases Based on the above, A and B are correct.

question has been updated in exam You are implementing authentication for applications in your company. You plan to implement self-service password reset (SSPR) and multifactor authentication (MFA) in Azure Active Directory (Azure AD). You need to select authentication mechanisms that can be used for both MFA and SSPR. Which two authentication methods should you use? Each correct answer presents a complete solution. NOTE: Each correct selection is worth one point. • A. Short Message Service (SMS) messages • B. Authentication app • C. Email addresses • D. Security questions • E. App passwords Expose Correct Answer Answer : AB

correct https://www.examtopics.com/exams/microsoft/az-303/view/7/ The following authentication mechanisms can be used for both MFA and SSPR: ✑ Short Message Service (SMS) messages ✑ Azure AD passwords ✑ Microsoft Authenticator app ✑ Voice call

SMS and Authenticator. The same question came in AZ304 with that option

From other Exam preparation question sets the B Option: "Azure AD Passwords" should be "Authentication App" and then mark A and B

For SSPR( check Azure Portal ) Mobile app notification Mobile app code Email Mobile phone Office phone Security questions For MFA (Chcek MFA user setting site) Call to phone Text message to phone Notification through mobile app Verification code from mobile app or hardware token So Common for SSPR and MFA are: Mobile App Code, Mobile Notification and Call to Phone Options are not available for this question.

A and E should be the answer

Simply AE https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-methods

There are only three methods that support MFA + SSPR : SMS, VOICE, MICROSOFT AUTHENTICATOR APP. Now coming to the context of this question, SMS is given as choice, so that's one correct answer. Voice and Authenticator APP don't find a mention so what remains is Azure AD passwords, Email and SQs. Always remember: Azure AD PASSWORD is the primary authentication system. MFA/ SSPR are secondary authentications steps (Remember 2-step verification ???) So whenever there is no other option available for secondary authentication steps, the primary authentication method (Azure AD Passwords) is considered. Hence correct answer is : AB

Answer is A. Short Message Service (SMS) messages B. Azure AD passwords

SMS\Voice call\Microsoft Authenticator app is correct

Answer is A & B, App password can be used only with MFA and not with SSPR.

Given Ans are correct !!

SMS & AD Password as both support MFA & SSRP.

Options are wrong. Microsoft Authenticator app & Voice call are missing.

AB is the right answer, there is no debate. E is only for MFA, not SSPR.

A& B are correct answers. An Azure AD password is often one of the primary authentication methods. You can't disable the password authentication method. Even if you use an authentication method such as SMS-based sign-in when the user doesn't use their password to sign, a password remains as an available authentication method.