Welcome to ExamTopics
ExamTopics Logo
- Expert Verified, Online, Free.

Unlimited Access

Get Unlimited Contributor Access to the all ExamTopics Exams!
Take advantage of PDF Files for 1000+ Exams along with community discussions and pass IT Certification Exams Easily.

Exam AZ-104 topic 6 question 9 discussion

Actual exam question from Microsoft's AZ-104
Question #: 9
Topic #: 6
[All AZ-104 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant named contoso.onmicrosoft.com that contains the users shown in the following table.

You enable password reset for contoso.onmicrosoft.com as shown in the Password Reset exhibit. (Click the Password Reset tab.)

You configure the authentication methods for password reset as shown in the Authentication Methods exhibit. (Click the Authentication Methods tab.)

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: No -
Two methods are required.

Box 2: No -
Self-service password reset is only enabled for Group2, and User1 is not a member of Group2.

Box 3: Yes -
As a User Administrator, User3 can add security questions to the reset process.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-passwords-faq

Comments

Chosen Answer:
This is a voting comment (?) , you can switch to a simple comment.
Switch to a voting comment New
fedztedz
Highly Voted 3 years, 2 months ago
Answer is not correct. It should be - NO: User2 needs 2 authentication methods. Security questions are not enough to reset password - NO: User1 is not part of the SSPR Group1 - NO: to be able to add security questions to the process. you need Global admin role https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#prerequisites & https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator-permissions
upvoted 140 times
mrshegz
2 years, 8 months ago
what is SSPR
upvoted 1 times
raydel92
2 years, 6 months ago
Self Service Password Reset
upvoted 51 times
...
Takloy
2 years, 4 months ago
Sometimes, Some People Remember...
upvoted 80 times
mdmahanti
1 year, 8 months ago
Sometime, Silly Points Resurface
upvoted 11 times
...
...
...
DodgyD
3 years, 2 months ago
Agree: User administrator role do not have permissions to manage MFA.
upvoted 2 times
...
vikki
3 years, 1 month ago
Did not see exactly the information regarding to add security questions to the process, however I do find that User Administrator permission is able to reset password from the link. https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#password-reset-permissions
upvoted 2 times
...
marcellov
2 years, 10 months ago
Besides the Global Admin role, that you should not give to anyone, if you want to configure MFA for non-admin users only use Authentication Administrator role and if you want to configure MFA for all users including admin users, use Privileged Authentication Administrator role.
upvoted 6 times
...
...
mlantonis
Highly Voted 2 years, 10 months ago
C0rrect Answer: Box 1: No Two methods are required (Mobile phone and Security questions). Box 2: No Self-service password reset is only enabled for Group2, and User1 is not a member of Group2. Box 3: No To be able to add Security questions to the process, you need to be a Global Administrator. User3 is User Administrator, so User3 cannot add security questions to the reset process. User Administrator doesn’t have MFA permissions. Reference: https://docs.microsoft.com/en-us/azure/active-directory/authentication/quickstart-sspr https://docs.microsoft.com/en-us/azure/active-directory/authentication/active-directory-passwords-faq https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#prerequisites https://docs.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator
upvoted 122 times
...
Amir1909
Most Recent 1 month, 1 week ago
No No No
upvoted 1 times
...
PrepaCertif
6 months, 2 weeks ago
Tested in LAB : No, No, No
upvoted 1 times
...
Teroristo
8 months ago
NNN https://learn.microsoft.com/en-us/answers/questions/356305/in-azure-could-the-user-administrator-have-permiss
upvoted 1 times
...
Josete1106
8 months, 1 week ago
N N N is correct!
upvoted 2 times
...
morito
1 year ago
Took a bit of digging, but here are my answers: - NO: User2 must provide two authentication methods before they can reset their password - NO: User 1 is not enabled for SSPR - NO: A User must have the role of global Administrator or Authentication Policy Administrator to change SSPR (https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr).
upvoted 3 times
...
djgodzilla
1 year ago
Box 1: No Two methods are required (Mobile / Security questions). Box 2: No Self-service password reset is only enabled for Group2, and User1 is not a member of Group2. Box 3: No User3 is User Administrator, With a two-gate policy, administrators don't have the ability to use security questions. Admin users cannot do the following: - Cannot manage MFA. - Cannot change the credentials or reset MFA for members and owners of a role-assignable group. https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-policy#administrator-reset-policy-differences https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator
upvoted 1 times
djgodzilla
1 year ago
Only Authentication administrators can do so not global globa can give authentication admin role to someone though).
upvoted 1 times
...
...
zellck
1 year, 1 month ago
NNN is the answer. https://learn.microsoft.com/en-us/azure/active-directory/roles/permissions-reference#user-administrator
upvoted 2 times
zellck
1 year, 1 month ago
Got this in Feb 2023 exam.
upvoted 4 times
...
...
typales2005
1 year, 2 months ago
Was on the 09/01/2023 exam.
upvoted 5 times
...
RKETBO
1 year, 3 months ago
The Number of methods required to reset option determines the minimum number of available authentication methods or gates a user must go through to reset or unlock his password. It can be set to either 1 or 2. Since this option is set to 2, user2 will not be able to reset his password after only one method has been run. User1 is a member of group1. Self-service password reset is enabled only for group2. As a user administrator, user3 cannot add security questions to the reset process. The following Technet articles contain more information about the topic https://learn.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks
upvoted 1 times
...
klexams
1 year, 5 months ago
N - need mobile phone too N - user2 is not in the group1 N - apparently it needs GA
upvoted 4 times
...
EmnCours
1 year, 7 months ago
Box 1: No Two methods are required (Mobile phone and Security questions). Box 2: No Self-service password reset is only enabled for Group2, and User1 is not a member of Group2. Box 3: No To be able to add Security questions to the process, you need to be a Global Administrator. User3 is User Administrator, so User3 cannot add security questions to the reset process. User Administrator doesn’t have MFA permissions.
upvoted 2 times
...
dani12
1 year, 7 months ago
SSP stands for Self Service Password reset.
upvoted 2 times
...
Lazylinux
1 year, 9 months ago
For sure NO NO NO and as per others comments - read mlantonis
upvoted 3 times
...
ra_aly
2 years ago
why azure exams are so confusing and there is a lack of knowledge, there are conflicting opinions and unclear direction.
upvoted 4 times
Lazylinux
1 year, 9 months ago
It is Microsoft my friend..Tell me anything about Microsoft that makes sense..yet people buy it!! Linux is the King Kong of the Universe
upvoted 1 times
...
...
benvdw
2 years ago
on exam 13/3/2022
upvoted 5 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...