Exam SC-300 topic 2 question 65 discussion

Correct answer. Basically, some administrative roles, by design can only use strong, two-gate password reset policy, regardles of SSPR settings. User Administrator and Password Administrator will be always forced to use two methods and cannot use security questions. Securiry Reader and User will use whatever is set under SSPR, so security questions in this case. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-reset-policy-differences

User1 (User Administrator) – Admins are not allowed to use security questions for SSPR because it’s considered a weaker authentication method. User2 (Password Administrator) – As an admin role, User2 cannot use security questions for SSPR. User3 (Security Reader) – Security roles are still considered privileged, so User3 cannot use security questions for SSPR. User4 (Standard User) – User4, being a regular user with no admin privileges, can use security questions for SSPR, as they’re the target audience for this method.

Administrator accounts can't use security questions as verification method with SSPR. Answer is B. https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-security-questions

Security reader not listed in 2 gate admin accounts https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-policy#administrator-reset-policy-differences

Shouldn't it be A since Security Reader is an Admin and Admins can't use security questions? https://learn.microsoft.com/en-us/entra/identity/authentication/concept-authentication-security-questions

I agree with 0byteThe answer is b

I think it should be Username only

Administrator accounts can't use security questions as verification method with SSPR.

Correct: https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions