SC-900 Describe the capabilities of Microsoft Entra Practice Question
A company uses Microsoft Entra ID and wants to allow users to reset their own passwords without calling the help desk. The company requires that users who forget their password must verify their identity using a mobile phone app before resetting. Which Microsoft Entra feature should they configure?
⚠ Common exam trap
Watch out — candidates often confuse password protection with password reset; password protection enforces password strength, while SSPR enables users to reset forgotten passwords.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Self-service password reset (SSPR)
Self-service password reset (SSPR) is the Microsoft Entra feature that enables users to reset their passwords without help desk involvement. It supports authentication methods including the Microsoft Authenticator app, which satisfies the requirement for mobile app verification. Configuring SSPR with the appropriate authentication methods allows users to securely regain access.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Identity Protection detects and remediates identity-based risks, such as compromised accounts. It does not provide self-service password reset. It can trigger a password reset when a risk is detected, but it does not allow users to initiate a reset on their own with mobile app verification.
- ✗
Microsoft Entra Password Protection
Why it's wrong here
Microsoft Entra Password Protection prevents users from creating weak or banned passwords. It does not provide a self-service password reset capability or identity verification via a mobile app. It is a complementary feature that enforces password complexity but does not address the scenario's need for users to reset their own passwords.
- ✓
Self-service password reset (SSPR)
Why this is correct
SSPR allows users to reset their passwords without administrator intervention. It supports authentication methods such as the Microsoft Authenticator app, which can be used for identity verification. Configuring SSPR with the Authenticator app meets the requirement for mobile phone app verification before password reset.
- ✗
Conditional Access
Why it's wrong here
Conditional Access controls access to resources based on conditions such as user, device, and location. It does not enable users to reset their own passwords. While it can require MFA for password reset, it is not the feature that provides the self-service reset functionality itself.
Go deeper
Related to this question
Learn chapter
Named Locations in Conditional Access
Key term
Authenticator app
An authenticator app is a software application on your phone or computer that generates temporary codes used to prove your identity when logging into online accounts.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
This SC-900 question is part of Courseiva's 1,279-question bank — original exam-style content with full explanations and wrong-answer analysis, never real exam questions or exam dumps. Learn why practice questions differ from exam dumps →
JA
Written and reviewed by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
Last reviewed September 2026 · checked against the official Microsoft exam blueprint
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.