SC-900 Describe the capabilities of Microsoft Entra Practice Question
A user reports that they cannot sign in to Microsoft Entra ID because they forgot their password. Which Microsoft Entra ID feature allows them to reset their password without contacting IT support?
⚠ Common exam trap
Test-takers frequently confuse Microsoft Entra ID Protection (which deals with risk detection) with SSPR, because both involve security and user authentication, but only SSPR enables the user to directly reset their own password without IT intervention.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Self-Service Password Reset (SSPR)
Self-Service Password Reset (SSPR) is the Microsoft Entra ID feature that allows users to reset their own forgotten passwords without needing to contact IT support. It works by verifying the user's identity through pre-configured authentication methods (e.g., phone, email, security questions) before permitting the password change. This directly addresses the user's inability to sign in due to a forgotten password.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra ID Connect
Why it's wrong here
Microsoft Entra ID Connect is an identity synchronization tool that connects an on-premises Active Directory with Microsoft Entra ID. While it facilitates the synchronization of user accounts, groups, and password hashes (or enables pass-through authentication), its primary function is not to provide a self-service mechanism for users to reset their own forgotten passwords directly within Microsoft Entra ID. It establishes the identity bridge, but doesn't offer the user-facing password reset portal.
- ✗
Microsoft Entra ID Protection
Why it's wrong here
Microsoft Entra ID Protection is a security service focused on detecting and remediating identity-based risks, such as compromised credentials or unusual sign-in patterns. It analyzes various signals to identify potential threats and can enforce policies like requiring multi-factor authentication or a password change if a risk is detected. However, it does not provide a user-initiated portal or workflow for individuals to reset a forgotten password when they are unable to sign in.
- ✗
Microsoft Entra ID Domain Services
Why it's wrong here
Microsoft Entra ID Domain Services (Azure AD DS) provides managed domain services, including traditional Active Directory features like LDAP, Kerberos, and NTLM, for cloud-based virtual machines and applications. It extends domain controller functionality to the cloud for legacy applications that require it, but it is not a direct user-facing service for self-service password resets within the Microsoft Entra ID tenant. While it can synchronize passwords from Entra ID, it does not offer the SSPR portal to end-users.
- ✓
Self-Service Password Reset (SSPR)
Why this is correct
Self-Service Password Reset (SSPR) is a crucial Microsoft Entra ID feature that empowers users to reset their forgotten or locked-out passwords without requiring administrator assistance. Users authenticate their identity through pre-registered verification methods, such as a mobile app notification, phone call, or personal email, to prove they are legitimate. This capability directly addresses the scenario where a user cannot sign in because they have forgotten their password, allowing them to regain access independently.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
User
A user is any person, system, or device that interacts with an IT service, resource, or identity system, typically authenticated through credentials and authorized to perform specific actions.
Key term
Microsoft Entra ID
Microsoft Entra ID is a cloud-based identity and access management service that lets employees sign in and access resources both inside and outside of your organization.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.