Exam SC-300 topic 2 question 113 discussion

Just tested in Azure portal. When you choose only 1 authentication method Mobile app notification is grayed out, and Email is the only of the options that are available.

I am going with A. Consider answer D states "an email to an address outside your organization" whereas "Email" is an option in SSPR, not what they have listed here. The Email option for Self-Service Password Reset (SSPR) can be configured for either internal or external email addresses. However, using an internal email address is generally more secure and recommended. Comparison: Email vs. Mobile App Notification Email: Pros: Easy to set up and use; familiar to most users. Cons: Can be less secure due to potential phishing attacks; relies on users having access to their email. Mobile App Notification: Pros: More secure; uses push notifications through apps like Microsoft Authenticator; less susceptible to phishing. Cons: Requires users to have the app installed and configured. Recommendation: Mobile App Notification is generally better for security and reliability. It provides a stronger defense against phishing and ensures users can securely reset their passwords using a trusted app.

Answer A) a mobile app notification (This is the only one that can be used from this particular list) Remember, the settings says they have to REGISTER at least one method...but the backend admin may have setup more than one authentication method to register with. The following authentication methods are available for SSPR: - Mobile app notification (***this is valid if the admin setup more than one method to authenticate) - Mobile app code (***valid for one method only scenario) - Email (***Has to be to their company email address and not external) - Mobile phone - Office phone (available only for tenants with paid subscriptions) - Security questions https://learn.microsoft.com/en-us/entra/identity/authentication/concept-sspr-howitworks#authentication-methods

109 is exactly the same question with completely different answer here, wtf?

So from many sets of questions we assume it's D, but literally a few questions up we have the same question with a different answer - "mobile app notification", why is that?

D only available in Azure