exam questions

Exam AZ-303 All Questions

View all questions & answers for the AZ-303 exam

Exam AZ-303 topic 2 question 24 discussion

Actual exam question from Microsoft's AZ-303
Question #: 24
Topic #: 2
[All AZ-303 Questions]

HOTSPOT -
You have an Azure Active Directory (Azure AD) tenant that contains the user groups shown in the following table.

You enable self-service password reset (SSPR) for Group1.
You configure the Notifications settings as shown in the following exhibit.

For each of the following statements, select Yes if the statement is true. Otherwise, select No.
NOTE: Each correct selection is worth one point.
Hot Area:

Show Suggested Answer Hide Answer
Suggested Answer:
Box 1: Yes -
Notify all admins when other admins reset their passwords: Yes.

Box 2: No -
Notify users on password resets: No.

Box 3: No -
✑ Notify users on password resets
If this option is set to Yes, then users resetting their password receive an email notifying them that their password has been changed. The email is sent via the
SSPR portal to their primary and alternate email addresses that are on file in Azure AD. No one else is notified of the reset event.
✑ Notify all admins when other admins reset their passwords
If this option is set to Yes, then all administrators receive an email to their primary email address on file in Azure AD. The email notifies them that another administrator has changed their password by using SSPR.
Example: There are four administrators in an environment. Administrator A resets their password by using SSPR. Administrators B, C, and D receive an email alerting them of the password reset.
Reference:
https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr

Comments

Chosen Answer:
This is a voting comment (?). It is better to Upvote an existing comment if you don't have anything to add.
Switch to a voting comment New
hc400
Highly Voted 4 years, 5 months ago
Based on documentation cited in the answer, admin doesn't get notified of his/her own password reset. So the given answer is correct.
upvoted 43 times
nexnexnex
4 years, 4 months ago
answer is correct, but for a different reason - only 'global administrators' get notifications about admin password change, not all kinds of administrators
upvoted 8 times
leeuw86
4 years, 4 months ago
can you provide a link to a document please which says that ?
upvoted 1 times
mindtrax
4 years, 4 months ago
https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr "All global admins would be notified when SSPR is used on an admin account."
upvoted 9 times
...
...
gssd4scoder
4 years ago
so why last is N?
upvoted 2 times
625lindenlaan
4 years ago
Because user 4 is not any type of admin. Global admin gets notified when someone uses SSPR on an admin account.
upvoted 4 times
in_da_cloud
3 years, 6 months ago
Well there's some contradiction in MS documentation: This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
upvoted 1 times
in_da_cloud
3 years, 6 months ago
I accidentally added the same link twice in my message above: This one says Azure AD will notify all global admins https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr#set-up-notifications-and-customizations This one says all kind of admins are being notified https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
upvoted 1 times
...
...
...
...
...
...
MichaelCWWong
Highly Voted 4 years, 4 months ago
Checked answer #2 is No. The option "Notify all admins when other admins reset their passwords" actually notify all OTHER admin but not user him/herself who reset his/her password. He/She would only get notification if option "Notify users on password resets" is turned on well, for this question. https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications
upvoted 11 times
Blimpy
4 years, 4 months ago
and the last question has nothing to do with SSPR (no notifications as it is not a self service action) - - ((admin auditing and alerting is another discussion unrelated to this question))
upvoted 2 times
...
...
plmmsg
Most Recent 3 years, 5 months ago
Y, N, N. Only Global Admin will receive notification.
upvoted 1 times
...
quantumray
3 years, 6 months ago
Question appeared On AZ-303 exam on 08/12/2021 - 49 questions, 4Q - Fabrikan case study
upvoted 1 times
...
syu31svc
3 years, 9 months ago
Yes No No is right https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications User1 gets a notification when User3 resets password because User1 is admin and User3 is also an admin. User3 will not get a notification if User3 resets his/her own password because “Notify users on password resets” was set to No
upvoted 4 times
...
AAPaul
3 years, 10 months ago
I had this question in the exam that i took on July 14th 2021
upvoted 4 times
...
AravindITGuy
3 years, 11 months ago
Took exam today passed this morning was on there 6/21/2021
upvoted 4 times
...
anupam77
3 years, 11 months ago
Answer is correct. Ans Y - User1 is Global Admin. "Azure AD will notify all global admins when someone uses SSPR on an admin account" N - As per below links, all other administrators will receive Notification and not the same admin himself N - This is not an SSPR scenario. (Not Self Service). Here another admin resets password of a user (not that the user himself is resetting password of his own) https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notifications https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr
upvoted 8 times
...
azurellc
4 years ago
On exam 5/15/2021
upvoted 6 times
...
QiangQiang
4 years, 1 month ago
Notifications To improve awareness of password events, SSPR lets you configure notifications for both the users and identity administrators. Notify users on password resets If this option is set to Yes, users resetting their password receive an email notifying them that their password has been changed. The email is sent via the SSPR portal to their primary and alternate email addresses that are stored in Azure AD. No one else is notified of the reset event. Notify all admins when other admins reset their passwords If this option is set to Yes, then all other Azure administrators receive an email to their primary email address stored in Azure AD. The email notifies them that another administrator has changed their password by using SSPR. Consider the following example scenario: There are four administrators in an environment. Administrator A resets their password by using SSPR. Administrators B, C, and D receive an email alerting them of the password reset. So, it's Y,N,N
upvoted 1 times
...
VivekSood
4 years, 1 month ago
Given answers are correct, Y N N
upvoted 2 times
...
NguyenLe777
4 years, 1 month ago
For me answer is corrected N - Y - Y Box 1: User 1 isn't belong to Group 1. so User 1 will not effect by rules. Box 2 & Box 3: both users are belong to Group 1. If's possible to received notifications
upvoted 1 times
pentium75
3 years, 11 months ago
Box 1: The policy applies to admins in "Group 1" who use SSPR. But "all other admins" are "all other admins" whether belonging to Group 1 or not. Thus Y. Box 2: N because only "all OTHER admins" receive the notification Box 3: N because does not involve SSPR at all
upvoted 2 times
...
...
demonite
4 years, 2 months ago
Box1 Yes user1 gets email as an admin has changed their password via sspr Box2 No user3 resets their password so other admins will get emails but not users Box3 Yes Global Admins will get notified regardless.
upvoted 2 times
betamode
4 years ago
demonite - Box 3 is NO because Azure AD will notify all global admins when someone uses SSPR on an admin account. Box 3 is talking about resetting a password of non-admin account so, global admin won't be notified and this is given in MS documentation as well for your reference - https://docs.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr Please read the section "Set up notifications and customizations" which clearly says that
upvoted 1 times
...
...
TOM1000
4 years, 2 months ago
It's Y N N
upvoted 3 times
...
msmannan
4 years, 3 months ago
Tested in the lab. Answer is N-N-N. With below Justification, none of the mentioned conditions in the question met. Setting: Notify users on password resets? Determines whether or not users receive an email to their primary and alternate email addresses notifying them when their own password has been reset via the Self-Service Password Reset portal Setting: Notify all admins when other admins reset their password? Determines whether or not all global administrators receive an email to their primary email address when other administrators reset their own passwords via the Self-Service Password Reset Portal Password administrators can reset passwords of other users who are non-administrators or members of the following roles only: Directory readers Guest inviter Password administrator User Account administrators can change passwords for users, Helpdesk administrators, and other User Account administrators only
upvoted 6 times
QiangQiang
4 years, 1 month ago
So it should be Y,N,N. User1 IS Global Administrator, right?
upvoted 2 times
...
...
Mikie889
4 years, 3 months ago
Y-N-N Notify users on password resets If this option is set to Yes, users resetting their password receive an email notifying them that their password has been changed. Notify all admins when other admins reset their passwords If this option is set to Yes, then all other Azure administrators receive an email to their primary email address stored in Azure AD.
upvoted 2 times
...
Miffy
4 years, 3 months ago
The given answer should be correct. Y N N. The second one is N because of this: https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-howitworks#notify-all-admins-when-other-admins-reset-their-passwords
upvoted 1 times
...
Community vote distribution
A (35%)
C (25%)
B (20%)
Other
Most Voted
A voting comment increases the vote count for the chosen answer by one.

Upvoting a comment with a selected answer will also increase the vote count towards that answer by one. So if you see a comment that you already agree with, you can upvote it instead of posting a new comment.

SaveCancel
Loading ...