SC-900 Describe the capabilities of Microsoft Entra Practice Question
A user reports that they cannot access the corporate portal after a password reset. The user can access other cloud apps. You verify that the user account is enabled and not locked. What should you check next?
⚠ Common exam trap
Many exam-takers assume a password reset always works seamlessly, but the SC-900 exam tests the understanding that authentication methods must be registered and up-to-date for the reset to succeed, especially when the user is prompted for additional verification.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Verify the user's registered authentication methods
The user can access other cloud apps, which rules out a global authentication or network issue. Since the account is enabled and not locked, the most likely cause is that the user's registered authentication methods (e.g., phone, authenticator app, or email) are missing, outdated, or not configured for the password reset flow. Microsoft Entra ID requires verified authentication methods to complete a password reset and subsequent sign-in, especially when the user is prompted for multifactor authentication or self-service password reset (SSPR) verification.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Disable and re-enable the user account
Why it's wrong here
If the user account is already enabled and active within Microsoft Entra ID, disabling and then re-enabling it is unlikely to resolve an access issue. This action is typically used to clear a locked-out state or force a re-provisioning of the account, but it does not address underlying authentication method problems or conditional access policies that might be preventing portal access. It represents an administrative overhead without direct benefit in this specific troubleshooting scenario.
- ✓
Verify the user's registered authentication methods
Why this is correct
A common reason for portal access issues, especially after a password reset or if the user has new devices, is an outdated or missing multi-factor authentication (MFA) registration. If conditional access policies require MFA for portal access, and the user's registered methods (e.g., Microsoft Authenticator, phone number) are incorrect or not configured, they will be blocked from signing in. Verifying and potentially resetting these methods in Microsoft Entra ID is a critical troubleshooting step to restore access.
- ✗
Reinstall the corporate portal application
Why it's wrong here
Reinstalling the corporate portal application on the user's device is generally irrelevant if the problem lies with authentication or authorization within Microsoft Entra ID. If other applications or web services are accessible, it indicates that the network connectivity and the device's basic functionality are sound. The corporate portal is typically a web-based application, meaning client-side installation issues have minimal impact on server-side authentication processes.
- ✗
Check if the user is assigned a Microsoft Entra ID P2 license
Why it's wrong here
While Microsoft Entra ID P2 licenses unlock advanced features like Identity Protection, Privileged Identity Management, and advanced Conditional Access policies, they are not typically required for basic user sign-in to a corporate portal. A user can sign in and access resources with a free or Microsoft Entra ID P1 license, provided they meet the necessary authentication and authorization requirements. Lack of a P2 license would not prevent fundamental access unless a very specific P2-dependent feature was explicitly configured to block access, which is less common for a general 'cannot access' report.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
Multifactor Authentication
Multifactor Authentication (MFA) is a security method that requires you to provide two or more pieces of evidence to prove your identity before accessing an account or system.
Key term
Authentication
Authentication is the process of verifying that someone or something is who or what it claims to be before granting access to a system or resource.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.