ExamGecko
Question list
Search
Search

List of questions

Search

Related questions











Question 89 - AZ-104 discussion

Report
Export

HOTSPOT

You have an Azure subscription that contains an Azure Directory (Azure AD) tenant named contoso.com. The tenant is synced to the on-premises Active Directory domain. The domain contains the users shown in the following table.

You enable self-service password reset (SSPR) for all users and configure SSPR to have the following authentication methods:

Number of methods required to reset: 2

Methods available to users: Mobile phone, Security questions

Number of questions required to register: 3

Number of questions required to reset: 3

You select the following security questions:

What is your favorite food?

In what city was your first job?

What was the name of your first pet?

For each of the following statements, select Yes if the statement is true. Otherwise, select No.

NOTE: Each correct selection is worth one point.


Question 89
Correct answer: Question 89

Explanation:

Box 1: No

Administrator accounts are special accounts with elevated permissions. To secure them, the following restrictions apply to changing passwords of administrators:

On-premises enterprise administrators or domain administrators cannot reset their password through Self-service password reset (SSPR). They can only change their password in their onpremises environment. Thus, we recommend not syncing on-prem AD admin accounts to Azure AD.

An administrator cannot use secret Questions & Answers as a method to reset password.

Box 2: Yes

Self-service password reset (SSPR) is an Azure Active Directory feature that enables employees to reset their passwords without needing to contact IT staff.

Box 3: Yes

Reference:

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment

asked 26/09/2024
ahmad hafiz
35 questions
User
0 comments
Sorted by

Leave a comment first