Question 43 of 88 from exam SC-300: Microsoft Identity and Access Administrator

Prev Question Next Question

Question

HOTSPOT - You have a Microsoft 365 tenant and an Active Directory domain named adatum.com.

You deploy Azure AD Connect by using the Express Settings.

You need to configure self-service password reset (SSPR) to meet the following requirements: -> When users reset their password, they must be prompted to respond to a mobile app notification or answer three predefined security questions.

-> Passwords must be synced between the tenant and the domain regardless of where the password was reset.

What should you do? To answer, select the appropriate options in the answer area.

NOTE: Each correct selection is worth one point.

Hot Area:

Answer Area

From the Password reset blade in the Azure Active

Directory admin center, configure: ‘Authentication methods
Notifications
Properties
Registration

From Azure AD Connect, enable: | Vv

Federation with Active Directory Federation Services (AD FS)
Pass-through authentication

Password hash synchronization

Password writeback

Show Answer

Explanations

https://docs.microsoft.com/en-us/azure/active-directory/authentication/howto-sspr-deployment https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-authentication-security-questions

Prev Question Next Question