SC-900 Describe the capabilities of Microsoft Entra Practice Question
An organization wants to allow users to reset their own passwords without help desk intervention. They also need to enforce multifactor authentication during the reset process. Which Microsoft Entra feature should they configure?
⚠ Common exam trap
Many candidates confuse Microsoft Entra Multifactor Authentication as a standalone solution for password reset, when in fact it is only a component that must be integrated with SSPR to achieve both self-service reset and MFA enforcement.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra Self-Service Password Reset
Microsoft Entra Self-Service Password Reset (SSPR) allows users to reset their own passwords without help desk intervention. By integrating with Microsoft Entra Multifactor Authentication, SSPR can enforce MFA during the reset process, satisfying both requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✓
Microsoft Entra Self-Service Password Reset
Why this is correct
Microsoft Entra Self-Service Password Reset (SSPR) is the correct solution because it directly addresses the need for users to reset their own passwords without requiring administrator intervention. This feature allows users to verify their identity using pre-registered authentication methods, such as mobile app notifications, phone calls, or email verification, to securely regain access to their accounts. SSPR significantly reduces helpdesk call volumes related to password resets and improves user productivity by providing immediate self-service access restoration.
- ✗
Microsoft Entra Identity Protection
Why it's wrong here
Microsoft Entra Identity Protection is primarily a security tool focused on detecting, investigating, and remediating identity-based risks within an organization. It analyzes sign-in data and user behavior to identify anomalies like impossible travel, leaked credentials, or unusual sign-in patterns, triggering automated responses such as requiring multi-factor authentication or blocking access. While crucial for overall security posture, its core functionality does not include providing a mechanism for users to initiate or perform their own password resets.
- ✗
Microsoft Entra Privileged Identity Management
Why it's wrong here
Microsoft Entra Privileged Identity Management (PIM) is designed to manage, control, and monitor access to critical resources by providing just-in-time and time-bound access to privileged roles. PIM helps mitigate the risks associated with excessive or misused administrative permissions by requiring activation and approval workflows for elevated roles. Its scope is specifically for managing and securing administrative privileges, not for enabling general users to perform self-service password resets for their standard user accounts.
- ✗
Microsoft Entra Multifactor Authentication
Why it's wrong here
Microsoft Entra Multifactor Authentication (MFA) enhances security by requiring users to provide two or more verification methods to prove their identity during sign-in, such as a password combined with a phone call, text message, or authenticator app notification. Its primary role is to add an extra layer of protection against unauthorized access to accounts. While MFA can be a verification method *used within* Self-Service Password Reset to verify a user's identity, MFA itself is not the feature that allows users to initiate or perform a password reset; it only secures the authentication process.
Go deeper
Related to this question
Learn chapter
Microsoft Entra ID
Key term
SSPR
Self-Service Password Reset — a system that allows users to reset their own passwords without contacting IT support.
Key term
MFA
Multi-Factor Authentication (MFA) is a security method that requires a user to verify their identity using two or more different types of evidence, such as a password plus a code from a phone, before they can access an account or system.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.