MS-102 Practice Question: Implement and manage Microsoft Entra identity and access
You are a Microsoft 365 administrator for a company that uses Microsoft Entra ID P1. The company wants to allow users to register for self-service password reset (SSPR) and require them to use two methods for authentication. You need to configure SSPR to require two methods. What should you do?
⚠ Common exam trap
It's easy for candidates to confuse Conditional Access MFA with SSPR authentication methods, which are configured separately.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
In the Microsoft Entra admin center, go to Password reset > Authentication methods, and set 'Number of methods required to reset' to 2.
Self-service password reset settings in Microsoft Entra ID allow you to specify the number of authentication methods required to reset a password. By navigating to Password reset > Authentication methods and setting 'Number of methods required to reset' to 2, users must register and use two methods. This fulfills the requirement directly without affecting sign-in MFA.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
In the Microsoft Entra admin center, go to Users > Password reset > Properties, and enable 'Require two methods'.
Why it's wrong here
There is no 'Require two methods' option under Users > Password reset > Properties. The correct location is Password reset > Authentication methods, where you set the number of methods required. This option describes an incorrect navigation path and setting, so it is not valid.
- ✗
Enable security defaults in Microsoft Entra ID.
Why it's wrong here
Security defaults enforce MFA for all users and require users to register for MFA, but they do not specifically configure SSPR to require two methods. Security defaults also disable SSPR customization. This option does not meet the requirement to require two methods for SSPR.
- ✗
Configure a Conditional Access policy that requires MFA for all users.
Why it's wrong here
Conditional Access MFA is for sign-in, not for SSPR. It does not control the number of methods required for password reset. SSPR has its own authentication methods and requirements. This option would not enforce two methods for SSPR and is therefore incorrect.
- ✓
In the Microsoft Entra admin center, go to Password reset > Authentication methods, and set 'Number of methods required to reset' to 2.
Why this is correct
The SSPR settings include an option for 'Number of methods required to reset'. Setting it to 2 requires users to register and use two authentication methods to reset their password. This directly meets the requirement. This setting is available in the Microsoft Entra admin center under Password reset > Authentication methods.
Go deeper
Related to this question
Learn chapter
Hybrid Identity with Entra Connect
Key term
MFA
Multi-Factor Authentication (MFA) is a security method that requires a user to verify their identity using two or more different types of evidence, such as a password plus a code from a phone, before they can access an account or system.
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
About these practice questions
Courseiva writes every MS-102 question from scratch — 712 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This MS-102 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the MS-102 exam.