Describe the capabilities of Microsoft Entra →hardMultiple ChoiceObjective-mapped

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Refer to the exhibit.
$users = Get-MgUser -Filter "startsWith(userPrincipalName, 'john') and userType eq 'Member'"
foreach ($user in $users) {
    New-MgUserAuthenticationMethod -UserId $user.Id -PhoneAuthenticationMethod -PhoneNumber "+1234567890" -PhoneType "mobile"
}

Refer to the exhibit. A Microsoft Graph PowerShell script is shown. What is the purpose of this script?

⚠ Common exam trap

It's easy for candidates to confuse registering a phone authentication method with enabling MFA or configuring SSPR, because the phone method is a common component of both, but the cmdlet's specific purpose is only to register the method, not to enable the broader feature.

Answer choices

Why each option matters

Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.

Correct answer & explanation

✓

The script uses the `New-MgUserAuthenticationPhoneMethod` cmdlet to register a phone number as an authentication method for a user in Microsoft Entra ID. This cmdlet specifically creates a phone authentication method, which can be used for multifactor authentication or self-service password reset, but its direct purpose is to register the phone method itself.

Answer analysis

Option-by-option breakdown

For each option: why learners choose it and why it is or isn't the right answer here.

✓
Register a phone authentication method for users.
Why this is correct
The PowerShell script utilizes the `New-MgUserAuthenticationPhoneMethod` cmdlet, which is specifically designed to add a new phone authentication method to a specified user's authentication methods in Microsoft Entra ID. This action registers a phone number, making it available for use in scenarios such as SMS-based multifactor authentication or passwordless sign-in, but does not inherently enable MFA itself. It's a foundational step for phone-based authentication.
✗
Configure self-service password reset settings.
Why it's wrong here
The provided script does not interact with cmdlets or APIs related to configuring Self-Service Password Reset (SSPR) policies or settings within Microsoft Entra ID. SSPR configuration typically involves defining authentication methods required for reset, enabling the feature for specific user groups, and setting up notification preferences, which are distinct administrative actions from merely registering a user's phone number.
✗
Reset passwords for all users named John.
Why it's wrong here
The PowerShell script's primary action, `New-MgUserAuthenticationPhoneMethod`, is exclusively for adding a phone number as an authentication method for a user within Microsoft Entra ID. It does not contain any commands or logic to initiate a password reset for any user, regardless of their name or other attributes. Password resets would typically involve cmdlets like `Reset-MgUserPassword` or similar administrative functions.
✗
Enable multifactor authentication for the users.
Why it's wrong here
While registering a phone authentication method is often a prerequisite for certain multifactor authentication (MFA) methods, such as SMS or voice call verification, the script itself does not enable MFA for users. Enabling MFA involves configuring Conditional Access policies or per-user MFA settings in Microsoft Entra ID, which are distinct administrative actions that determine when and how MFA is enforced for user sign-ins.

Go deeper

SC-900 Describe the capabilities of Microsoft Entra Practice Question

Exhibit

Why each option matters

Option-by-option breakdown

Related to this question