SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your company is using Microsoft Entra ID to manage identities. You want to allow users to reset their own passwords without help desk intervention, but only if they have registered for self-service password reset (SSPR). What should you configure?
⚠ Common exam trap
Many candidates confuse enabling SSPR with requiring MFA registration, but MFA registration alone does not grant password reset capabilities—SSPR must be explicitly enabled and configured.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Enable Self-Service Password Reset (SSPR) in Microsoft Entra ID.
Enabling Self-Service Password Reset (SSPR) in Microsoft Entra ID allows users to reset their own passwords without help desk intervention, provided they have registered for the feature. This directly meets the requirement of allowing password resets only for registered users, as SSPR requires prior registration to verify identity before a reset is permitted.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Require all users to register for Microsoft Entra MFA.
Why it's wrong here
Requiring users to register for Microsoft Entra Multi-Factor Authentication (MFA) enhances sign-in security by adding a second verification step. While MFA registration establishes methods that can be used for Self-Service Password Reset (SSPR) verification, simply registering for MFA does not automatically enable the SSPR feature itself. SSPR is a distinct service that must be explicitly configured within Microsoft Entra ID to allow users to initiate a password reset.
- ✗
Configure Microsoft Entra password protection.
Why it's wrong here
Configuring Microsoft Entra Password Protection is a security measure designed to prevent users from creating or using weak, commonly compromised, or custom banned passwords. Its primary function is to enforce robust password policies and block known bad passwords, thereby enhancing overall tenant security. However, this feature does not provide any mechanism for users to independently reset their forgotten passwords; it only governs the quality of passwords being set.
- ✗
Implement Privileged Identity Management (PIM).
Why it's wrong here
Implementing Microsoft Entra Privileged Identity Management (PIM) focuses on managing, controlling, and monitoring access to critical organizational resources and administrative roles. PIM's core purpose is to provide just-in-time and just-enough access, reducing the attack surface associated with standing administrative privileges. This advanced identity governance feature has no direct functionality related to enabling standard users to reset their own forgotten passwords.
- ✓
Enable Self-Service Password Reset (SSPR) in Microsoft Entra ID.
Why this is correct
Enabling Self-Service Password Reset (SSPR) in Microsoft Entra ID is the direct and correct solution for allowing users to reset their own forgotten passwords without requiring administrator assistance. Once SSPR is configured and users have successfully registered their chosen authentication methods (e.g., mobile app, phone, email), they can independently verify their identity and set a new password, significantly improving user experience and reducing help desk workload.
Go deeper
Related to this question
Learn chapter
Identity Concepts
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
Key term
SSPR
Self-Service Password Reset — a system that allows users to reset their own passwords without contacting IT support.
About these practice questions
Courseiva writes every SC-900 question from scratch — 1,250 in total, each with an explanation and a wrong-answer breakdown. None are copied from real exams or dumps. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.