SC-900 Describe the capabilities of Microsoft Entra Practice Question
Your organization uses Microsoft Entra ID. You need to ensure that users can reset their own passwords without help desk intervention, while maintaining security by requiring multi-factor authentication (MFA) during the reset process. Which feature should you enable?
⚠ Common exam trap
It's easy for candidates to confuse the authentication enforcement mechanism (MFA or Conditional Access) with the actual self-service reset feature, mistakenly selecting MFA or Conditional Access instead of SSPR, which is the only option that directly provides the password reset functionality.
Answer choices
Why each option matters
Answer the question above first, then reveal the full breakdown to understand why each option is right or wrong.
Correct answer & explanation
✓
Microsoft Entra self-service password reset (SSPR).
Microsoft Entra self-service password reset (SSPR) is the feature specifically designed to allow users to reset their own passwords without help desk intervention. When combined with Microsoft Entra Multi-Factor Authentication (MFA) as a registration and reset requirement, SSPR enforces MFA during the reset process, meeting both the self-service and security requirements.
Answer analysis
Option-by-option breakdown
For each option: why learners choose it and why it is or isn't the right answer here.
- ✗
Microsoft Entra Identity Protection.
Why it's wrong here
Microsoft Entra Identity Protection is a feature within Microsoft Entra ID that detects potential vulnerabilities affecting an organization's identities, such as leaked credentials or suspicious sign-ins. While it can enforce actions like requiring a password change for high-risk users, its primary function is risk detection and automated remediation, not directly providing a self-service mechanism for users to initiate a password reset themselves.
- ✗
Microsoft Entra Multi-Factor Authentication.
Why it's wrong here
Microsoft Entra Multi-Factor Authentication (MFA) adds a second layer of security during the sign-in process by requiring users to verify their identity using multiple methods, such as a phone call or a mobile app notification. While MFA significantly enhances account security, it is a verification method for authentication and does not inherently provide the functionality for users to initiate and complete a password reset process on their own.
- ✗
Conditional Access policies.
Why it's wrong here
Conditional Access policies in Microsoft Entra ID define conditions under which users can access resources, allowing administrators to enforce controls like requiring MFA, blocking access, or mandating a compliant device. Although Conditional Access can be configured to enforce specific requirements during authentication, it is a policy engine for access control and does not offer the direct capability for users to perform a self-service password reset.
- ✓
Microsoft Entra self-service password reset (SSPR).
Why this is correct
Microsoft Entra self-service password reset (SSPR) is a crucial feature that empowers users to reset their forgotten or locked passwords without administrator intervention. SSPR can be configured to require users to verify their identity through multiple authentication methods, including MFA, before they can successfully reset their password, thereby enhancing both convenience and security for password management within the organization.
Go deeper
Related to this question
Learn chapter
Core Security Concepts
Key term
Self-service password reset
Self-service password reset (SSPR) is a Microsoft identity feature that allows users to reset their own passwords without needing help from an IT helpdesk.
Key term
SSPR
Self-Service Password Reset — a system that allows users to reset their own passwords without contacting IT support.
About these practice questions
One of 1,250 original SC-900 practice questions on Courseiva, each with a full explanation and wrong-answer analysis — not exam dumps or protected exam content. Learn why practice questions differ from exam dumps →
JA
Written by Johnson Ajibi, MSc IT Security
Senior Network & Security Engineer · founder of Courseiva
This SC-900 practice question is part of Courseiva's free Microsoft certification practice question bank. Courseiva provides original exam-style practice questions with explanations, topic-based practice, mock exams, readiness tracking, and study analytics to help learners prepare for the SC-900 exam.