mediumMultiple Choice
MS-102 Practice Question: Allow users to reset their own forgotten…
A company wants to allow users to reset their own forgotten passwords using a mobile app notification as the verification method. Which Microsoft Entra feature should be enabled and configured?
⚠ Common exam trap
Test-takers frequently confuse Identity Protection (which can trigger a password reset based on risk) with the actual self-service password reset feature, forgetting that Identity Protection only initiates the reset process but does not provide the user-facing portal or verification methods for forgotten passwords.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Self-service password reset
Self-service password reset (SSPR) is the Microsoft Entra feature that allows users to reset their own forgotten passwords. To use a mobile app notification as the verification method, the administrator must enable SSPR and configure the 'Mobile app notification' authentication method under the 'Authentication methods' policy. This satisfies the requirement for a password reset triggered by a mobile app notification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID Password Protection
Why it's wrong here
Microsoft Entra ID Password Protection is a policy engine that audits and blocks weak or compromised passwords by applying a custom banned password list at change/set time, but it does not provide any workflow for users to regain access to a forgotten account. Thus, while it improves password hygiene, it never enables a user to initiate their own reset.
- ✓
Self-service password reset
Why this is correct
Self-service password reset (SSPR) is the Microsoft Entra ID feature that lets end users verify ownership of their account through configured authentication methods—such as mobile app notification, phone call, email, or security questions—and then create a new password without help desk involvement. This directly matches the requirement in the question, making it the correct choice for allowing users to reset their own forgotten passwords.
- ✗
Privileged Identity Management
Why it's wrong here
Privileged Identity Management (PIM) is a just-in-time and time-bound activation service for Microsoft Entra ID roles, Azure resources, and Exchange Online admin roles, focusing on governance for elevated users rather than general end-user password maintenance. PIM's approval and audit workflows do not include any scenario where an ordinary user resets their forgotten password.
- ✗
Identity Protection
Why it's wrong here
Microsoft Entra ID Protection evaluates risk signals to detect compromised accounts and automates remediation through conditional access policies, such as blocking sign-in or challenging for a password change when abnormal behavior is detected. That forced, risk-triggered password change is initiated by the system, not by the user who simply forgot their password, so this service cannot be used for self-service password reset.
Go deeper
Related to this question
Learn chapter
Entra ID Governance Portal
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
Key term
Policy
A policy is a set of rules or guidelines that defines how an organization manages, secures, and operates its IT systems and services.
About these practice questions
This MS-102 question is part of Courseiva's 712-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.