SC-900 Describe the capabilities of Microsoft Entra Practice Question
You need to allow users to reset their own passwords without contacting the help desk. Which Microsoft Entra feature should you enable?
⚠ Common exam trap
Many exam-takers confuse the authentication app (Microsoft Authenticator) with the self-service password reset feature, thinking the app itself provides password reset capabilities, when in fact it only provides a second factor for authentication.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Self-service password reset
Self-service password reset (SSPR) is the Microsoft Entra feature that allows users to reset their own passwords without contacting the help desk. It is designed to reduce help desk costs and improve user productivity by enabling password changes or unlocks through a verified authentication method, such as email, phone, or security questions.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Authenticator
Why it's wrong here
Microsoft Authenticator is a mobile application primarily used for multi-factor authentication (MFA) to verify a user's identity during sign-in or other secure transactions. While it can serve as a verification method *within* a self-service password reset (SSPR) process, it does not, by itself, provide the capability for users to initiate or manage their own password resets. Its core function is identity verification, not the SSPR service itself.
- ✗
Identity Governance
Why it's wrong here
Microsoft Entra Identity Governance is a suite of capabilities designed to manage and monitor identity and access lifecycles across an organization. It focuses on ensuring the right people have the right access to the right resources at the right time, through features like access reviews, entitlement management, and privileged identity management. It does not directly provide the functionality for users to reset their own forgotten passwords; its scope is broader access management.
- ✓
Self-service password reset
Why this is correct
Self-service password reset (SSPR) is a Microsoft Entra ID feature that allows users to reset or unlock their own passwords without requiring administrator or help desk intervention. Users are prompted to verify their identity using pre-registered authentication methods, such as a mobile app, phone call, or email, before they can set a new password. This capability significantly reduces help desk calls and improves user productivity by providing immediate password recovery.
- ✗
Conditional Access
Why it's wrong here
Conditional Access is a powerful policy engine in Microsoft Entra ID that evaluates various signals, such as user location, device compliance, and application sensitivity, to make real-time decisions about granting or blocking access to resources. While it can enforce policies like requiring MFA for password reset *registration* or *during* a reset attempt, it does not provide the underlying functionality for users to initiate the password reset process themselves. Its role is to enforce access policies, not to facilitate the reset action.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
Key term
Security
Security in IT is the practice of protecting systems, networks, and data from unauthorized access, damage, or theft.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.