mediumMultiple ChoiceObjective-mapped
MS-102 Practice Question: Enable Self-Service Password Reset (SSPR) for all…
A company plans to enable Self-Service Password Reset (SSPR) for all users. The administrator must ensure that users are required to register at least two authentication methods: one from the 'mobile app' category and one from the 'phone call' category. Which combination of methods should the administrator select in the SSPR registration settings?
⚠ Common exam trap
A common mix-up: candidates assume 'Mobile phone' and 'Office phone' are different categories, but both are classified under the 'phone call' category in SSPR, so selecting both does not satisfy the requirement for a method from the 'mobile app' category.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Mobile app notification and office phone
The SSPR registration policy requires users to select at least two distinct authentication methods from the allowed list. By choosing 'Mobile app notification' (from the mobile app category) and 'Office phone' (from the phone call category), the administrator satisfies the requirement of one method from each specified category. The 'Office phone' option is classified under the 'phone call' category in Microsoft Entra ID SSPR settings.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Mobile app notification and office phone
Why this is correct
Selecting Mobile app notification satisfies the mobile app authentication method category, while Office phone is classified under the phone call category. This combination fulfills the SSPR policy requirement of having two methods from different categories, ensuring users can verify identity via either the Microsoft Authenticator push notification or a call to their office landline. It also aligns with best practices for SSPR availability by providing diverse verification options.
- ✗
Mobile app notification and mobile app code
Why it's wrong here
Both Mobile app notification and Mobile app code are sub-methods of the Microsoft Authenticator app, placing them in the same mobile app category. Since the requirement mandates one method from the phone call category, this pair fails because it provides two methods from the same category and does not include any phone call option. Users would have no way to authenticate via a phone call if the mobile app methods are unavailable.
- ✗
Office phone and mobile phone
Why it's wrong here
Both are phone-related; mobile phone can be used for SMS or phone call, but the requirement specifies one must be from 'phone call', which office phone covers, but mobile phone could be SMS, not necessarily a call. However, the bigger issue is missing a mobile app method.
- ✗
Mobile phone and email
Why it's wrong here
Mobile phone method in SSPR can be configured to send either an SMS or a phone call, so it could potentially satisfy a 'phone call' requirement if configured as a call. However, Email is a separate authentication method that is neither a phone call nor a mobile app method, and thus fails the explicit requirement to include methods from those two categories. Additionally, this selection does not include any mobile app method, leaving users without the required Authenticator-based option.
Go deeper
Related to this question
Learn chapter
Microsoft 365 Tenant Setup
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
About these practice questions
Courseiva writes every MS-102 question from scratch — 241 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.