Exam AZ-104 topic 2 question 106 discussion

The correct answer is D, you can not assign SSPR to individual users it has to be a group. It can be a Security Group or a M365 Group.

Correct. It could be E also, but only if the 365 group was security enabled, and it doesn't mention that in the question.

Microsoft Entra self-service password reset (SSPR) can be enabled for users. You can choose to enable it for: All users in your tenant. Selected users by adding them to a specific security group. Therefore, from the given options: User1 (an individual user) can have SSPR enabled. Security group 1 can be used to enable SSPR for all its members. M365 Groups (Microsoft 365 Groups) are primarily for collaboration and typically contain users, but you enable SSPR at the user or security group level, not directly on an M365 Group itself. While users within an M365 group could be enabled for SSPR if they are also part of the "All users" setting or a designated security group, the M365 Group itself isn't the direct target for SSPR enablement in the Azure portal. So, the correct answer is: C. User1 and Group1 only

SSPR can be enabled on 1)None 2) Selected (Security Group) 3) All so only security group is applicable. https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr

user1 and group1 only

In the Azure portal, you can enable Self-Service Password Reset (SSPR) for both individual users and security groups, but not for Microsoft 365 groups.

The answer is E Yes you can assign SSPR to individual users via azure portal. Go to the Azure Portal Navigate to Azure Active Directory → Password reset Under "Properties", set: "Self service password reset enabled" = Selected Under "Select users or groups", you can: Select individual users (like [email protected]) Or select groups

Yes, Microsoft Entra's Self-Service Password Reset (SSPR) can be enabled for individual users and security groups, but not directly for Microsoft 365 groups. Important Considerations: Security Groups: SSPR can be enabled for security groups, applying the configuration to all members within those groups. Microsoft 365 Groups: SSPR cannot be directly enabled for Microsoft 365 groups. To apply SSPR settings to users within a Microsoft 365 group, you would need to add those users to a security group and then enable SSPR for that security group. Individual Users: While there's no direct method to enable SSPR for individual users without using groups, you can achieve this by creating a security group specifically for those users and enabling SSPR for that group. https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr?utm_source=chatgpt.com

When you're comfortable with the process and the time is right to communicate the requirements with a broader set of users, you can select a group of users to enable for SSPR. Or, you can enable SSPR for everyone in the Microsoft Entra tenant. https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr#enable-self-service-password-reset

Entra ID has 3 options for SSPR, 1- none 2-Group 3- All so we can set SSPR for users and groups

Correct Answer D. You can Enable SSPR for Groups (both Security and M365) OR ALL users, but not individual users.

I checked this https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/3-implement-azure-ad-self-service-password-reset and found that to enable self-service password reset (SSPR) for a single user, you must specify a security group. I tested it in the lab, and it also allows an M365 group to be selected for SSPR. Correct Answer is Security Group or a M365 Group

The key word here is "enable". You can assign SSPR only to individual user, who you then can put in a group. However, in Azure you can ENABLE either to selected users or users grouped in a security group. Therefore, for me the answer is C.

Imo this should be C, as the question states that the subscription only contains the listed user and groups. The article bellow states that we can either enable SSPR for all users (which is only User1 in this case) or for a security group. M365 group is not mentioned. https://learn.microsoft.com/en-us/training/modules/allow-users-reset-their-password/3-implement-azure-ad-self-service-password-reset

You can assign SSPR to individual users and Security Groups, but Microsoft 365 Groups are not supported. Correct answer: C. User1 and Group1 only.

You cannot enable Self-Service Password Reset (SSPR) for an individual user; it must be done for a group. Currently, you can only enable one Microsoft Entra group for SSPR using the Microsoft Entra admin center. References: Tutorial: Enable users to unlock their account or reset passwords using Microsoft Entra self-service password reset Self-service password reset (SSPR) can only be enabled for security groups in Microsoft Entra ID. It cannot be enabled for Microsoft 365 groups. The self-service group management features do not apply to mail-enabled security groups or distribution lists. References:

You cannot enable Self-Service Password Reset (SSPR) for an individual user; it must be done for a group. Currently, you can only enable one Microsoft Entra group for SSPR using the Microsoft Entra admin center. References: Tutorial: Enable users to unlock their account or reset passwords using Microsoft Entra self-service password reset